7.2 Further Investigate Anomalies

After you view the outlier data, you can use the action available from the grid rows in the Top Anomalous Hosts table to further investigate anomalies:

Search for <IP_Address>

Searches events for the host and time range for which you selected to view scoring data and displays the results on the Search page.