- Dashboards
- Navigation Overview
- View and Interact with Dashboards
- View and Interact with Visualizations
- User Management
- Configure and Manage Dashboards
- Create a Dashboard
- Add a Visualization to a Dashboard
- Add a Text Tile
- Modify a Dashboard Layout
- Add Dashboard Filters
- Manage Automatic Refresh Rates
- Create a Scheduled Delivery
- Make a Dashboard Public
- Export and Import Dashboards
- Edit Dashboard Filters
- Edit Dashboard Details
- Duplicate a Dashboard
- Delete a Dashboard
- Configure and Manage Visualizations
- Create a Visualization
- Auto-Create a Visualization from a Natural Language Prompt
- Add Visualizations from the Library to a Dashboard
- Create a Visualization from a Search Query
- Modify a Visualization
- Configure Visualization Query Filters
- Include Context Filtering in Visualizations
- Make a Visualization Public
- Export and Import Visualizations
- Duplicate a Visualization
- Remove a Visualization from a Dashboard
- Delete Visualizations from the Library
- Pre-Built Dashboards
- Advanced Analytics
- Threat Center
- Case Manager
- Compliance / Event Store
- Access Grant and Revoke Activity Dashboard
- Account Logout Summary Dashboard
- Account Management Activity Dashboard
- Application Security Event Summary Dashboard
- Authenticated User Accounts on Hosts Dashboard
- AWS CloudTrail Summary Dashboard
- Data Loss Prevention Activity Dashboard – Host-Based
- Data Loss Prevention Activity Dashboard – User-Based
- Data Loss Prevention Activity Summary Dashboard
- Default Account Access Dashboard
- Default Credential Usage and Change Activity Dashboard
- Denied Web Access Activity Dashboard
- Disabled User Account Summary Dashboard
- Discovered Attacks by Source and Destination Dashboard
- Endpoint Detection and Response Dashboard
- Failed Application Logon Activity Dashboard
- Failed Audit Logs Summary Dashboard
- Failed Host Login Attempt Counts by Users Dashboard
- Failed VPN Login Attempts and Remote Session Timeouts Dashboard
- Firewall Activity Dashboard
- Firewall and Router Device Interfaces Dashboard
- Indicator of Compromise (IOC) Statistics Dashboard
- Insecure Authentication Attempts Dashboard
- Microsoft 365 Summary Dashboard
- Microsoft Windows Overview Dashboard
- Network Applications by Traffic Volume Dashboard
- Policy Activity Summary Dashboard
- Port Usage Trends Dashboard
- Privileged Access Dashboard
- Privileged Access Dashboard – User-Based
- Protocols by Network Traffic Dashboard
- Remote Session Overview Dashboard
- Security Alert Summary Dashboard – Impacted Hosts
- Security Alert Summary Dashboard – Origin Hosts
- Security Alert Summary Dashboard – Users
- Successful Application Logon Activity Dashboard
- Successful Database Login Activity Dashboard
- Successful Physical Access Dashboard
- Top Attackers Dashboard
- User Account Creation Summary Dashboard
- User Account Lockout Activity Dashboard
- Vendor Authentication Activity Dashboard
- Windows Audit Failure Summary by Hosts Dashboard
- Windows Audit Failure Summary by Users Dashboard
- Windows User Privilege Elevation Dashboard
- Zscaler HTTP Dashboard
- Correlation Rules
- SOC Management
- Pre-Built Visualizations
- Anomalies - Use Case & MITRE Coverage
- Anomalies by Rule Name
- Anomalies by Use Case
- Anomalies Count Over Time
- Anomaly Distribution by MITRE Tactic & Score
- Application Count
- Closed Incidents
- Correlation Rules by Severity
- Correlation Rules Triggered Over Time
- Detected Anomalies
- Host-Based DLP Alerts Count
- Incidents Created
- Incident Summary by Incident Type
- Number of Hosts with DLP Alerts
- SOC Incident Distribution
- Top 5 Host-Based DLP Alert Categories
- Top 5 Protocols in Host-Based DLP Alerts
- Top 10 Host-Based DLP Alert Types
- Top 10 Hosts with DLP Alerts
- Top Activities per Top 10 Applications
- Top Users per Top 10 Applications
- Trend of Application Security Events
Auto-Create a Visualization from a Natural Language Prompt
As part of Exabeam Copilot and its set of AI-driven capabilities, you can use the natural language prompt at the top of the Dashboard application to quickly auto-create your visualization. If the automatically generated visualization does not produce the data you want to visualize, you can still modify the visualization settings to produce exactly the desired results.
Note
This auto-create option is currently available only for Event model visualizations.
If you do not want to use this feature, see Create a Visualization for steps to configure your measures, dimensions, and filters manually.
To auto-create a visualization from the natural language prompt:
Enter the visualization creation process, in one of the following ways:
From the Dashboards home page, click the Visualizations tab at the top and then click New Visualization.
From inside of an existing dashboard, click Add Visualization at the top and then select Create new.
A dialog box opens and displays the available Exabeam data models. The models displayed depend on the Exabeam products in your environment.
Select the Event data model. A visualization dialog box opens and displays a natural language prompt bar at the top.
Enter your visualization criteria in plain language in the prompt bar. For example:
activity types by product for the past month in a table chart.
Click the Build Visualization icon (
) on the right. The measures and dimensions are selected automatically, the filters are configured, and the chart selection is made. Then the visualization data is generated.If you want to tweak the visualization, you can manually change any of the measures, dimensions, filters, or chart type and then click Run Data to re-generate the visualization data. For information about manually configuring visualization settings, see Create a Visualization.
Note
When you modify the visualization manually, a note is displayed under the Natural Language prompt as a reminder that the prompt no longer reflects the changes to your visualization settings.
When you are satisfied with the data your visualization displays, click in the title field in the upper-left corner of the dialog box and replace the placeholder text with a descriptive title for your visualization.
To complete the visualization, do one of the following, depending on where you started creating it:
Creating from the Visualizations Tab – Click Save. The visualization is created and added to the library. You can access it for viewing and editing from the Visualization tab. If you want to be able to add the new visualization to one or more dashboards at a later time, you will first need to make it public. See Make a Visualization Public.
Creating from within a Dashboard – Click Add. The visualization is created and added to the dashboard where you started creating it. If you would like to add it to the visualization library, click the options icon (
) of the visualization tile on the dashboard and select Add to Library. A library icon (
) appears on the visualization tile next to the title.