Try the following things:
Search for "root" to see if anyone is trying to log into your servers as root
Search for a particular hostname
Change the time frame by selecting an area on the histogram or from the menu above
Click on messages below the histogram to see how the data is being filtered