DashboardDashboards Release Notes

Support for STIX/TAXII based Context Tables

You can now filter dashboard visualizations for threat intelligence data from both Exabeam-provided and STIX/TAXII-based sources. This functionality is made possible because the Context Management service now provides threat intelligence data from both prebuilt, curated sources and from external log sources that support the STIX/TAXII framework.

For more information, see Include Context Filtering in Visualizations in the Dashboards Guide.

Updates to AI/LLM Pre-built Dashboards

The following updates have been made to AI/LLM pre-built dashboards:

For more information about the AI/LLM pre-built dashboards, see AI/LLM Dashboards in the Dashboards Guide.

Improve Filtering a Visualization on a Context Table

Filter behavior has been improved when selecting a context table as a query filter for a visualization. You can now select a context table that contains no records and add it to the visualization query filter. However, the visualization will not display any results until at least one record is added to the context table. A new message has been added to alert you when the context table you select contains no records.

For more information, see Include Context Filtering in Visualizations in the Dashboards Guide.

New Scheduled Reports Tab

A new Scheduled Reports tab has been introduced in the Dashboards application. The new tab provides a centralized view of all the dashboard reports you have currently scheduled for delivery via email. From the new Scheduled Reports tab you can see which dashboards are scheduled for delivery, which recipients are scheduled to receive them, and on what schedule they will be delivered. You can also control the scheduled reports, with options to Run Now, Edit, Duplicate, or Delete.

For more information about the new tab, see Navigate the Scheduled Reports Tab in the Dashboards Guide.

Auto-Creating a Threat Center Alert Visualization from a Natural Language Prompt

As part of Exabeam Nova and its set of AI-driven capabilities, the use of the natural language prompt for auto-creating a dashboard visualization has been expanded to an additional data model. You can now use the natural language prompt for the Threat Center Alerts data model. This enhancement means that you can leverage the natural language prompt in the Dashboard application to describe, in plain language, the Threat Center Alerts data you want to visualize. Based on this plain language prompt, the measures, dimensions, filters, and even the chart type are configured automatically.

If the automatically generated visualization does not produce the data you want to visualize, you can modify the visualization settings manually to produce exactly the desired results.

For more information about auto-creating visualizations, see Auto-Create a Visualization from a Natural Language Prompt in the Dashboards Guide.

Support for Pivoting to Search for Rule Triggered Events

To support pivoting into Search for rule-triggered events that are represented in dashboards and visualizations, the Show Results in Search option is now available for those events. Using this option allows you to click on a specific area or data point in a visualization and pivot from Dashboards to the Search application. There you can drill down further to investigate the rule-triggered event.

For information, see View and Interact with a Dashboard or View and Interact with a Visualization in the Dashboards Guide.

Updated Audit Log Support for Dashboards

Audit log coverage has been updated for dashboards in the New-Scale Security Operations Platform. For clarity, all activity types for dashboards have been renamed from report to dashboard. In addition, some new dashboard activities are now available in audit logs. The following types of dashboard events can be accessed via the Query Builder in Basic Search:

For information, see Dashboards in Audit Logs in the Dashboards Guide.