Forum Discussion
Rozh
Nimbostratus
NimbostratusDDOS attack event ID
Hello Guys. Please Help me. In our company,we have SIEM Private and I want to Create Dashbord to show the DDOS attack Family (syn flood,connection flood ,DNS query flood , ssl flood , ....). In F5...
Erik_Novak
Employee
EmployeeOK--there is also Security > Reporting > DoS Dashboard which will show an "Attack ID" which might be what you're after, and also what triggered it--such as "Volumetric" in the case of DoS. For different granularity, go to Security > Event Logs > DoS > Application Events. If you have a remote logging server, the Attack ID should be sent there as well. Check out this resource:
