Skip to main content

DashboardDashboards Guide

Port Usage Trends Dashboard

This dashboard provides an overview of port usage and trends.

Note

This dashboard can assist you in complying with the following regulatory requirements: PCI 1.1.6, PCI 2.3, NIST 800-53 AC-4, NIST 800-53 SA-9(2), NIST 800-53 CM-7, NIST 800-53 CM-7(3), ISO 27001 A.13.1.1, CJIS 5.10.1.

Time Range Filter

The Event : Approx Log Time filter sets the time range for the event data. The default setting is in the last 7 days. You can update this filter with a wide range of customizable settings.

To update the time range filter, click the arrow (icon-expand.png) on the right, under the Edit button, to expand the filters panel. In the Event : Approx Log Time filter, select an operator from the first drop down menu and then enter or select values in the subsequent fields, depending on the operator you selected. To save your filter changes, click Apply on the right side of the filter panel. The updated filter is applied to the visualization.

time-range-options.png

Port Usage Trends

This Sankey chart breaks down the event counts for the different source and destination ports, and illustrates the connections between them. The left side of the chart shows the source port counts; the right side shows the destination port counts. To highlight the links between the ports and view their count values, hover your pointer over the links. To view the underlying events of a value, click the link, and then click Show Results in Search.

Port-Usage-Trends-Sankey.png

Top 20 Destination Ports

This pie chart illustrates the count proportions of the top 20 most common destination ports. To view the represented values, hover your pointer over the graph slices. To view the underlying events of a value, click the graph slice, and then click Show Results in Search.

Top-20-Destination-Ports.png

Destination Port Trends

This area chart represents the count trends for the different destination ports over the selected time range. Move your pointer over a graph area to highlight it and display the represented count values. To view the underlying events of a value, click the data point, and then click Show Results in Search.

Destination-Port-Trends.png

Top 20 Source Ports

This pie chart illustrates the count proportions of the top 20 most common source ports. To view the represented values, hover your pointer over the graph slices. To view the underlying events of a value, click the graph slice, and then click Show Results in Search.

Top-20-Source-Ports.png

Source Port Trends

This area chart represents the count trends for the source different ports over the selected time range. Move your pointer over a graph area to highlight it and display the represented counts. To view the underlying events of a value, click the data point, and then click Show Results in Search.