DashboardDashboards Guide

The Event : Approx Log Time filter sets the time range for the event data. The default setting is in the last 7 days. You can update this filter with a wide range of customizable settings.

To update the time range filter, click the arrow () on the right, under the Edit button, to expand the filters panel. In the Event : Approx Log Time filter, select an operator from the first drop down menu and then enter or select values in the subsequent fields, depending on the operator you selected. To save your filter changes, click Apply on the right side of the filter panel. The updated filter is applied to the visualization.

This single value bar chart displays the number of unique Windows users who have had their privileges elevated over the selected time range.

This line graph shows the count trends for Windows user privilege events over the selected time range. To view the values represented in the chart, move your pointer over the graph line and hover on the data points. To view the underlying events of a value, click the data point, and then click Show Results in Search.

This table displays the event counts for the top 10 Windows users with the most account privilege elevations. Click the heading of the column that you want to sort the data by. Click the arrow icons to change between ascending  and descending  orders.

This pie chart illustrates the count proportions of Windows user privilege elevation events by domain. To view the represented values, hover your pointer over the graph slices. To view the underlying events of a value, click the graph slice, and then click Show Results in Search.

The total number of Windows user privilege elevation events for all domains is displayed in the center of the chart.

This table provides user, account, and count information for Windows user privilege elevation events by the different destination hosts. Click the heading of the column that you want to sort the data by. Click the arrow icon to change between ascending  and descending  orders. You may need to use the scroll bar on the right to view all the rows.

This bar chart breaks down Windows user privilege elevation events by their accounts and destination hosts. To view the values represented in the bar segments, hover your pointer over them. To view the underlying events of a value, click the bar segment, and then click Show Results in Search.

This pie chart illustrates the count proportions of the top 10 Windows accounts used for privilege elevation. To view the represented values, hover your pointer over the graph slices. To view the underlying events of a value, click the graph slice, and then click Show Results in Search.

The total number of Windows user privilege elevation events for all domains is displayed in the center of the chart.

This bar chart breaks down Windows user privilege elevation events by their accounts and account domains. To view the values represented in the bar segments, hover your pointer over them. To view the underlying events of a value, click the bar segment, and then click Show Results in Search.

This table displays the raw log data of the last 20 Windows user privilege elevation events. Click the arrow icon on the table heading to change between ascending  and descending  chronological order. To view all the table rows, use the scroll bar on the right.