timesketch icon indicating copy to clipboard operation
timesketch copied to clipboard

Published 20 hours ago • verified publisher icon google

Issue with graph generation

Open joshuank-fr opened this issue 3 years ago • 1 comments

Describe the bug I am desperately trying to generate the winlogin graph. I have a note "Gaph generated for timineline" but nothing is displayed.

To Reproduce Steps to reproduce the behavior:

  1. Go to Graph
  2. Click on Windows logins

Expected behavior Generate winlogins graph as show here in demo (https://demo.timesketch.org/sketch/6/graph/explore?plugin=winlogins)

image

Screenshots image

Desktop (please complete the following information):

  • OS: NAME="Ubuntu" VERSION="20.04.2 LTS (Focal Fossa)" ID=ubuntu ID_LIKE=debian
  • Browser [chrome]
  • Version [Version 96.0.4664.45 (official Buid) 64-bit]

Additional context N/A

joshuank-fr avatar Nov 22 '21 09:11 joshuank-fr

The Windows logon/logoff events analyzer needs to be run to tag events as being logon/logoff events before this graph will show you any data. Have you already run this analyzer? If you have, do you get results when you search for tag:logon-event?

csash avatar Dec 29 '21 23:12 csash

As @csash mentioned - The logon/logoff analyzer need to run before to tag the relevant events. We have noted this as an improvement when we port over the graph to the new and upcoming UI.

Closing this out for now, but feel free to reopen as necessary

berggren avatar Oct 15 '22 22:10 berggren