- Dashboards
- Navigation Overview
- View and Interact with Dashboards
- View and Interact with Visualizations
- User Management
- Configure and Manage Dashboards
- Create a Dashboard
- Add a Visualization to a Dashboard
- Add a Text Tile
- Modify a Dashboard Layout
- Add Dashboard Filters
- Manage Automatic Refresh Rates
- Create a Scheduled Report
- Make a Dashboard Public
- Export and Import Dashboards
- Edit Dashboard Filters
- Edit Dashboard Details
- Duplicate a Dashboard
- Delete a Dashboard
- Configure and Manage Visualizations
- Create a Visualization
- Auto-Create a Visualization from a Natural Language Prompt
- Create a Visualization from a Search Query
- Add Visualizations from the Library to a Dashboard
- Modify a Visualization
- Configure Visualization Query Filters
- Include Context Filtering in Visualizations
- Make a Visualization Public
- Export and Import Visualizations
- Duplicate a Visualization
- Remove a Visualization from a Dashboard
- Delete Visualizations from the Library
- Configure and Manage Scheduled Reports
- Pre-Built Dashboards
- Advanced Analytics Dashboards
- AI/LLM Dashboards
- Case Manager Dashboards
- Compliance Dashboards
- Correlation Rules Dashboards
- Event Store Dashboards
- Access Grant and Revoke Activity
- Account Logout Summary
- Account Management Activity
- Application Security Event Summary
- Authenticated User Accounts on Hosts
- AWS CloudTrail Summary
- Data Loss Prevention Activity – Host-Based
- Data Loss Prevention Activity – User-Based
- Data Loss Prevention Activity Summary
- Default Account Access
- Default Credential Usage and Change Activity
- Denied Web Access Activity
- Disabled User Account Summary
- Discovered Attacks by Source and Destination
- Endpoint Detection and Response
- Failed Application Logon Activity
- Failed Audit Logs Summary
- Failed Host Login Attempt Counts by Users
- Failed VPN Login Attempts and Remote Session Timeouts
- Firewall Activity
- Firewall and Router Device Interfaces
- IOC Statistics
- Insecure Authentication Attempts
- Log Delay Insights
- Microsoft 365 Summary
- Microsoft Windows Overview
- Network Applications by Traffic Volume
- Policy Activity Summary
- Ports Usage Trend
- Privileged Access
- Privileged Access – User-Based
- Protocols by Network Traffic
- Remote Session Overview
- Security Alert Summary – Impacted Hosts
- Security Alert Summary – Origin Hosts
- Security Alert Summary – Users
- Successful Application Logon Activity
- Successful Database Login Activity
- Successful Physical Access
- Top Attackers
- User Account Creation Summary
- User Account Lockout Activity
- Vendor Authentication Activity
- Windows Audit Failure Summary by Hosts
- Windows Audit Failure Summary by Users
- Windows User Privilege Elevation
- Zscaler HTTP Dashboard
- Security Operations Center Management Dashboards
- Threat Center Dashboards
- Pre-Built Visualizations
- Anomalies - Use Case & MITRE Coverage
- Anomalies by Rule Name
- Anomalies by Use Case
- Anomalies Count Over Time
- Anomaly Distribution by MITRE Tactic & Score
- Application Count
- Closed Incidents
- Correlation Rules by Severity
- Correlation Rules Triggered Over Time
- Detected Anomalies
- Host-Based DLP Alerts Count
- Incidents Created
- Incident Summary by Incident Type
- Number of Hosts with DLP Alerts
- SOC Incident Distribution
- Top 5 Host-Based DLP Alert Categories
- Top 5 Protocols in Host-Based DLP Alerts
- Top 10 Host-Based DLP Alert Types
- Top 10 Hosts with DLP Alerts
- Top Activities per Top 10 Applications
- Top Users per Top 10 Applications
- Trend of Application Security Events
Auto-Create a Visualization from a Natural Language Prompt
As part of Exabeam Nova and its set of AI-driven capabilities, you can use the natural language prompt at the top of the Dashboard application to quickly auto-create your visualization. If the automatically generated visualization does not produce the data you want to visualize, you can still modify the visualization settings to produce exactly the desired results.
Note
This auto-create option is currently available to create visualizations only for the Event Store Event data model and the Threat Center Alerts data model. You must be using Threat Center to access the Threat Center Alerts data model.
If you do not want to use this feature, see Create a Visualization for steps to configure your measures, dimensions, and filters manually.
To auto-create a visualization from the natural language prompt:
Enter the visualization creation process, in one of the following ways:
From the Dashboards home page, click the Visualizations tab at the top and then click New Visualization.
From inside of an existing dashboard, click Add Visualization at the top and then select Create new.
A dialog box opens and displays the available Exabeam data models. The models displayed depend on the Exabeam products in your environment.
Select the Event data model. A visualization dialog box opens and displays a natural language prompt bar at the top.
Enter your visualization criteria in plain language in the prompt bar. For example:
activity types by product for the past month in a table chart.
Click the Build Visualization icon (
) on the right. The measures and dimensions are selected automatically, the filters are configured, and the chart selection is made. Then the visualization data is generated.If you want to tweak the visualization, you can manually change any of the measures, dimensions, filters, or chart type and then click Run Data to re-generate the visualization data. For information about manually configuring visualization settings, see Create a Visualization.
Note
When you modify the visualization manually, a note is displayed under the Natural Language prompt as a reminder that the prompt no longer reflects the changes to your visualization settings.
When you are satisfied with the data your visualization displays, click in the title field in the upper-left corner of the dialog box and replace the placeholder text with a descriptive title for your visualization.
To complete the visualization, do one of the following, depending on where you started creating it:
Creating from the Visualizations Tab – Click Save. The visualization is created and added to the library. You can access it for viewing and editing from the Visualization tab. If you want to be able to add the new visualization to one or more dashboards at a later time, you will first need to make it public. See Make a Visualization Public.
Creating from within a Dashboard – Click Add. The visualization is created and added to the dashboard where you started creating it. If you would like to add it to the visualization library, click the options icon (
) of the visualization tile on the dashboard and select Add to Library. A library icon (
) appears on the visualization tile next to the title.