In this lecture I will continue explaining how to work with Ilsa by filtering the results based on a
specific value.
So here after getting the summary based on the source I've read this.
If I want to get the records of a specific IP address I can click on the link for that IP.
For example.
The second one here.
So now we see the records about this IP only and we can focus our analysis more about that one another
way for doing that is just by typing manually the value of that Ivey in the query field as we see here
which was done automatically when we have clicked on the summary link third way for searching for the
records of a specific entry is by using the term drop down menu.
So here in the query field I will remove the group by keyword
and then from the term drop down menu I will select broken and then fill it.
Source IP and then I will type the IP that I want to search for the record of it.
So 10 not 100.
And then I will click on add and we see that the proc on the source IP was added to the query field
for that IP and then I will hit on enter here and we see that we have gotten the same results as we
have for the previous step and a final way for doing that is by clicking on the link of the entity that
we want to search for in the record itself.
So here in the first step I will set the limit to be
fifteen hundred
and I will remove the crew by keyword
and then I will change the from date to be state and then I will hit enter
and I will search for the specific IP and I will find it on the ninth page.
So we see this IP here so I will click on the link of that IP and then in the query field I will hit
enter and we see that again the Ebro connection to toss ivy for that IP was added to the query field.
So now I will hit on inter and we see that.
Also we have gotten the same results.
So now if we want to focus more on a specific record we can click on the Info link for that record.
For example this one and then select get cap and enter our credentials so the user name and the password
and click on submit.
And here we see the details about this record.
For example the
operating system used and also the transactions done between the client which is presented in blue and
the server which is presented in red.
So in this lecture I have explained how to focus the analysis more based on a specific entry and how
to display the details of a specific record using the get b cap or CAD me.
And in the next lecture I will start explaining how to use signally.