You can retrieve and explore XDR data on the Observations page.

On the left navigation pane, click Investigate and click the Observations tab.

Image of Observations tab on the Investigate page
Tip:

The following filters are especially useful when searching for observations:

Example of XDR-specific filters

XDR Data on the Observation Details Pane

Click the Expand right-arrow icon (>) icon next to the item of interest.

The following image shows details for an IDS observation. The XDR data is highlighted.

Detailed Observations Pane

Another example shows the netconn data associated with the observation:

Screenshot showing netconn details
Note: For general information about the Observations page, see Investigate - Observations.