DashboardDashboards Guide

The Event : Approx Log Time filter sets the time range for the event data. The default setting is in the last 7 days. You can update this filter with a wide range of customizable settings.

To update the time range filter, click the arrow () on the right, under the Edit button, to expand the filters panel. In the Event : Approx Log Time filter, select an operator from the first drop down menu and then enter or select values in the subsequent fields, depending on the operator you selected. To save your filter changes, click Apply on the right side of the filter panel. The updated filter is applied to the visualization.

This single value bar chart displays the number of unique users who have triggered security alerts during the selected time range.

This Sankey chart breaks down the top 10 users per alert severity. The left side of the chart shows the different users, and the right side displays the different alert severities. To highlight the links between the users and severities and view their count values, hover your pointer over the links.

This bubble chart shows the event counts of the different security alert types by user. Larger bubble sizes indicate a greater event count. To view the represented values, hover your pointer over the bubbles. To view the underlying events of a value, click the bubble, and then click Show Results in Search.

This line graph shows the count trends for security alerts over the selected time range. To view the values represented in the chart, move your pointer over the graph line and hover on the data points. To view the underlying events of a value, click the data point, and then click Show Results in Search.

This table displays event details for the last 20 security alerts. Click the heading of the column that you want to sort the data by. Click the arrow icon to change between ascending  and descending  orders. To view all the table rows and columns, use the scroll bars on the right and at the bottom of the table.