Is the Paths showing a visited URL, or a resource requested by a visit to a URL?

[studio27]

What is the name of the domain?

domain-not-relevant

What is the issue you’re encountering

Understanding what the paths informaiton in security analytics is telling us

What steps have you taken to resolve the issue?

I am looking through the documentation, but can’t find a clear answer to something that is pretty obvious, but I want to check my understanding.

What are the steps to reproduce the issue?

When looking at a security event, I see a section called “Paths”. I would like to know if this is showing the paths that a user is visiting (ie is in the url section of their browser) or if it is a request made by them visiting a particular page.

For example. In the image below a security event is filtered by an IP address. That IP address shows in the paths a list of resources, including an image

Does this mean that this IP has visited that image directly, or that they have visited a page which has requested that image?

Its a simple question, and I would assume that it is the latter, but it would be helpful to have that confirmed!

Thanks

What feature, service or problem is this related to?

Account Analytics

Screenshot of the error

[ikmal]

For example. In the image below a security event is filtered by an IP address. That IP address shows in the paths a list of resources, including an image
Does this mean that this IP has visited that image directly, or that they have visited a page which has requested that image?

I think you need to look at the referrer too. If there is a referrer, then most likely the request is being made from a page that has already been visited and is requesting that image.