Search: Timeline tab

The Timeline tab displays timeline information related to your search. When the query contains file hash, IP, domain, or threat related expressions, the widget will provide an analysis timeline for these terms. The timeline data is collected across all analysis runs indexed. This way you can quickly position the global timeline of these threats or IoC with respect to the timeline of your own events.

The timeline widgets served from the queries are combined by type of information, each information type being displayed in a dedicated graph with a unified time axis. Due to the graphical representation, the maximum number of timeline widgets that can be displayed is 12 for each given type of information.

When you hover over an item in the widget, a pop-up displays the number of records at that moment in the timeline.