> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Viewing Event Details

The <Tooltip tip="Any traffic or data exchange detected by LevelBlue products through a sensor or external devices such as a firewall.">event</Tooltip> details page provides in-depth information on events.

**To view the details of an event**

1. Go to **Activity > Events**.

2. Click the event to display a summary view, then click the event name to open the full details of the event.

   <Frame>
     <img src="https://mintcdn.com/levelblue-5324744e/cTvy_WdX_rVxbBkS/images/usm-anywhere/user-guide/alarms/eventdetails.webp?fit=max&auto=format&n=cTvy_WdX_rVxbBkS&q=85&s=c7fce6a84caf2496dceaafcca9fd97d5" width="857" height="765" data-path="images/usm-anywhere/user-guide/alarms/eventdetails.webp" />
   </Frame>

   Click the <img src="https://mintcdn.com/levelblue-5324744e/jTImDFBjBH7kNNGB/images/central-any-app/buttons/star.svg?fit=max&auto=format&n=jTImDFBjBH7kNNGB&q=85&s=0ba9b13f9c26202f050ba6ac9881fd3a" style={{ height: "1em", verticalAlign: "middle", display: "inline-block", margin: "0 0.25em" }} width="20" height="20" data-path="images/central-any-app/buttons/star.svg" /> icon to bookmark an item for quick access.

   <Note>
     **Note:** You can view your bookmarked items by going to the secondary menu and clicking the <img src="https://mintcdn.com/levelblue-5324744e/jTImDFBjBH7kNNGB/images/central-any-app/buttons/star.svg?fit=max&auto=format&n=jTImDFBjBH7kNNGB&q=85&s=0ba9b13f9c26202f050ba6ac9881fd3a" style={{ height: "1em", verticalAlign: "middle", display: "inline-block", margin: "0 0.25em" }} width="20" height="20" data-path="images/central-any-app/buttons/star.svg" /> icon. This will display all of your bookmarked items and provide direct links to each of them.
   </Note>

   The Event Details page includes event management functions that are supported for your assigned user <Tooltip tip="Tasks and responsibilities based on job description and position within an organization. A user's role is often used to define access to functionality and privileges to perform specific tasks and operations.">role</Tooltip>:

   * **Select Action**: See [Applying Actions to Events](actions-to-events) for more information.
   * **Create Rule**: See [Creating Rules from Events](creating-rules-from-events) for more information.
   * **Generate Report**: This option displays if you have opened the full details of the event. See [Create an Events Report](exporting-events) for more information.

   The event details include the main fields that identify an event. Keep in mind that you can edit or add values into this field:

   * **Investigation**: This field indicates if the event has been associated to an investigation. You can click the <img src="https://mintcdn.com/levelblue-5324744e/T1hrc0hK0aza_DCc/images/central-any-app/buttons/pencil-new.svg?fit=max&auto=format&n=T1hrc0hK0aza_DCc&q=85&s=98e40a5a6b1c2795a0f42a417bc7756f" style={{ height: "1em", verticalAlign: "middle", display: "inline-block", margin: "0 0.25em" }} width="24" height="24" data-path="images/central-any-app/buttons/pencil-new.svg" /> icon to edit the field and enter the title or the number that identifies each investigation. See [Adding an Event to an Investigation](investigation) for more information.

   You can see the event details, then the source, the destination, the source and destination users, the <Tooltip tip="Contents of the application layer of a packet triggering the security event.">payload</Tooltip>, and the log. The <img src="https://mintcdn.com/levelblue-5324744e/T1hrc0hK0aza_DCc/images/central-any-app/buttons/angle-down.svg?fit=max&auto=format&n=T1hrc0hK0aza_DCc&q=85&s=48353c06623bc41301800dc185292758" style={{ height: "1em", verticalAlign: "middle", display: "inline-block", margin: "0 0.25em" }} width="20" height="20" data-path="images/central-any-app/buttons/angle-down.svg" /> icon located next to the Source, Destination, and two User fields enables you the access to several options. See [Events List View](events-list-view) for more information about those options.

   In addition, you have these three options:

   * **Add to current filter**: This option enables you to add the asset to the selected filters.
   * **Look up in OTX**: This option searches the IP address of the source asset in the LevelBlue Open Threat Exchange (OTX™) page. See [Using OTX in USM Anywhere](../otx/using-otx-in-anywhere) for more information.
   * **Add asset to system**: Use this option to create the asset, see [Adding Assets](../asset-management/asset-administration/adding-assets) for more information.

   <Note>
     **Note:** The value in the FQDN field comes from the event itself (raw log). This field can have a real FQDN, an IP address, or be empty.
   </Note>

3. In the upper right corner, click **Previous** and **Next** to navigate between items.

4. Click the <img src="https://mintcdn.com/levelblue-5324744e/jTImDFBjBH7kNNGB/images/central-any-app/buttons/times.svg?fit=max&auto=format&n=jTImDFBjBH7kNNGB&q=85&s=46ab3ff30e20455ede86906627e8d51d" style={{ height: "1em", verticalAlign: "middle", display: "inline-block", margin: "0 0.25em" }} width="20" height="20" data-path="images/central-any-app/buttons/times.svg" /> icon to close the dialog box.
