This function allows you to:
Perform a Event Query for the last hour on a single event for:
Destination IP addresses
Source IP addresses
Event Name
NOTE: You cannot perform a query on a null (empty) field.
Graphically display the source fields (IP, port, event, sensor type, Collector) mapped to the destination fields (IP, port, event, sensor type, Collector name) of the selected events.
Below is an illustration of source IP addresses mapped to destination IP addresses.