...
- restricted to a list of 20 entries and cannot be cleared, except by restarting the SnareCore service
- new events will be displayed with an alarm bell icon next to it
- events are highlighted in the criticality level colour nominated in your audit policies
- the window will automatically refresh every 30 15 seconds for event logs or when the Latest Events menu item is selected
- displays the status of the current network connection(s) to the log server
- displays the date and time of the last HeartBeat sent, if applicable
- for audit events, the Source column is composed of the bold part which is the Channel name eg DNS Server, followed by the Source Name eg Microsoft-Windows-DNS-Server-Service
...