Is there a place I can go to find out exactly what an Event or an Event Group is looking at. For example, I noticed that one of the built in filters is called "Security Events". When you go to edit that filer, you see that the condition is "Security Alerts". Where can I go to see exactly what is considered and what will trigger a "Security Alert"?
Thanks in advance
Yes! You can see what events are in an event group from Build > Groups. You can refine it just to Event Groups to just see those, then click on one, and down below you'll see which events are checked off.