DashboardDashboards Guide

The Event : Approx Log Time filter sets the time range for the event data. The default setting is in the last 7 days. You can update this filter with a wide range of customizable settings.

To update the time range filter, click the arrow () on the right, under the Edit button, to expand the filters panel. In the Event : Approx Log Time filter, select an operator from the first drop down menu and then enter or select values in the subsequent fields, depending on the operator you selected. To save your filter changes, click Apply on the right side of the filter panel. The updated filter is applied to the visualization.

This single value bar chart displays the number of unique hosts with Windows audit failure activity during the selected time range.

This column chart shows the top 10 hosts with the most Windows audit failure events. To view the values represented on the chart, hover your pointer over the column bars. To view the underlying events of a value, click the bar, and then click Show Results in Search.

This area chart shows the count trends for Windows audit failure events on the different hosts over the selected time range. Move your pointer over a graph area to highlight it and display the represented count values. To view the underlying events of a value, click the data point, and then click Show Results in Search.

This table displays the raw log data of the last 20 Window audit failure events. Click the arrow icon on the table heading to change between ascending  and descending  order. To view all the table rows, use the scroll bar on the right.