> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/stream-catalogs/stream-catalog-detail-view.md).

# Stream Catalog: Detail View

{% hint style="danger" %}
**Please note**: To use this new feature, you must [update the Enginsight Loggernaut component](/docs/manual/english/installation-and-configuration/updates/enginsight-siem.md#updating-loggernaut) to **version 2.14.x**.
{% endhint %}

***

<i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a stream catalog in the [stream catalog overview](/docs/manual/english/platform-usage/siem/stream-catalogs.md#stream-catalogs-overview) to navigate to the corresponding detail view. The **SIEM** → **Stream Catalogs** → **\<Catalog Name>** → **Streams** view opens.

Here you can find a list of all [streams](#stream-list) that the respective catalog contains and adjust the catalog settings.

{% hint style="warning" %}
**Please note**: The settings of stream catalogs managed by Enginsight can be adjusted only to a limited extent.
{% endhint %}

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FZUfg9ZgvSl64XCBEZTDE%2FEnginsight-EN-SIEM-Stream%20Catalogs-Catalog%20Detail%20View-Full.jpg?alt=media&amp;token=0a8b2182-e118-4e4b-a919-b9fe599d313e" alt=""><figcaption></figcaption></figure>

***

## Navigation

The stream catalog detail view is divided into two areas. The left side contains a [filter list](#filter-list), while the right side contains a [list of all streams included in the catalog](#stream-list) that you can customize based on the selected filters.

### Filter List

<div align="left"><figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FN2L6EXMOLWruTTUuTLwa%2FEnginsight-EN-SIEM-Stream%20Catalogs-Create%20Catalog-Filter%20List.jpg?alt=media&amp;token=1246367e-92b1-4343-b314-a7ff4c8a1b06" alt=""><figcaption></figcaption></figure></div>

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a filter item to apply the corresponding filter to the stream list on the right side.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list to view additional entries.

### Stream List

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

#### Sorting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

#### Deleting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a list item to select the corresponding item. Alternatively, select the checkbox in the table header to select all list items.

The <i class="fa-trash">:trash:</i> **Delete** button then appears in the upper-right corner. Click it and confirm the prompt by clicking **Delete Permanently**.

{% hint style="danger" %}
**Please note**: Deleted items cannot be recovered.
{% endhint %}

#### Further Actions for List Items

The following actions are available for each list item:

<table><thead><tr><th width="210.0546875">Action</th><th>Description</th></tr></thead><tbody><tr><td>Highlight</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Favorite</strong> icon <i class="fa-square-star">:square-star:</i> to pin the corresponding stream to the top of the table, regardless of the selected table sorting.</td></tr><tr><td>Open in Data Lake</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click the <strong>Open in Data Lake</strong> icon <i class="fa-water">:water:</i> to show the respective stream in the <a href="/docs/manual/english/platform-usage/siem/data-lake.md">data lake</a>.</td></tr></tbody></table>

***

## Included Streams: Overview

The overview of streams that the respective catalog contains is structured as a table.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F2BsseQoMO7nqiT0NsNmp%2FEnginsight-EN-SIEM-Stream%20Catalogs-Catalog%20Detail%20View-Overview.jpg?alt=media&amp;token=f58fa964-339c-4ee2-94e1-bdfeb87f9dfb" alt=""><figcaption></figcaption></figure>

The following information is shown:

<table><thead><tr><th width="199.9296875">Column</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td>Shows the name of the stream, an additional description, and assigned tags, if provided.<br><br>For managed streams and custom streams that you selected using filter criteria, the corresponding filter criteria are also shown.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a stream to navigate to the respective <a href="/docs/manual/english/platform-usage/siem/stream-catalogs/stream-catalog-detail-view.md">edit view</a>. There, you can adjust the configured settings and delete the stream.</td></tr><tr><td>Severity</td><td><p>Shows the severity of a SIEM incident that is triggered by the corresponding stream.<br><br>The following severity levels can be displayed:</p><ul><li><strong>Critical</strong>: An incident triggered by the stream has very high criticality.</li><li><strong>High</strong>: An incident triggered by the stream has high criticality.</li><li><strong>Medium</strong>: An incident triggered by the stream has medium criticality.</li><li><strong>Low</strong>: An incident triggered by the stream has low criticality.</li><li><strong>Informational</strong>: An incident triggered by the stream is for informational purposes only.</li></ul></td></tr><tr><td>False Positives</td><td><p>Shows the level of false-positive detections generated by the stream.<br></p><p>The following levels can be shown:</p><ul><li><strong>High</strong>: The stream has a high level of false-positive detections.</li><li><strong>Medium</strong>: The stream has a medium level of false-positive detections.</li><li><strong>Low</strong>: The stream has a low level of false-positive detections.</li></ul></td></tr><tr><td>Incidents</td><td><p>Shows whether SIEM incident detection is enabled for the corresponding stream.<br></p><p>When the incident detection is enabled, a green alarm clock icon <i class="fa-alarm-clock" style="color:green;">:alarm-clock:</i> is shown. When the incident detection is disabled, a gray crossed-out alarm clock icon <i class="fa-alarm-minus" style="color:$primary;">:alarm-minus:</i> is shown.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the alarm clock icon to enable or disable incident detection. Triggered incidents are shown under <strong>SIEM</strong> → <a href="/docs/manual/english/platform-usage/siem/incidents.md">Incidents</a>.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note</strong>: To receive notifications about triggered incidents, you must first create an Alert of the <strong>Stream Catalog (SIEM)</strong> type under <strong>Alerts</strong> → <a href="/docs/manual/english/platform-usage/alerts/overview/add-alert.md">Add Alert</a>.</p></div></td></tr></tbody></table>

***

## Catalog Settings

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-sliders">:sliders:</i> **Catalog Settings** in the upper-right corner to navigate to the edit view of the respective stream catalog. There, you can [adjust the configured settings](/docs/manual/english/platform-usage/siem/stream-catalogs/add-stream-catalog.md#general-settings) and delete the stream catalog.

{% hint style="warning" %}
**Please note**: The settings of stream catalogs managed by Enginsight can be adjusted only to a limited extent.
{% endhint %}

The following actions are available:

<table><thead><tr><th width="200.39453125">Option</th><th>Description</th></tr></thead><tbody><tr><td>Show Streams</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-chart-line">:chart-line:</i> <strong>View Streams</strong> in the upper-right corner to return to the <a href="#included-streams-overview">overview of included streams</a>.</td></tr><tr><td>Save Changes</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Save Changes</strong> after adjusting any settings.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note</strong>: Unsaved changes cannot be recovered.</p></div></td></tr><tr><td>Back</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Back</strong> to return to the list view.</td></tr><tr><td>Remove</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Remove</strong> and confirm the prompt by clicking <strong>Remove</strong> to delete all configured settings.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note</strong>: Deleted settings cannot be recovered.</p></div></td></tr></tbody></table>

***
