- Get Started with Threat Center
- Group Detections
- Work on Cases
- Triage Alerts in Threat Center
- Edit and Collaborate in Threat Center
- Find Cases or Alerts
- Build a Search in Threat Center
- Enter a Search Using Exabeam Query Language in Threat Center
- Enter a Search Using Natural Language in Threat Center
- Run a Recent Search in Threat Center
- Create a New Saved Search in Threat Center
- Run a Saved Search in Threat Center
- Edit a Saved Search in Threat Center
- Delete a Saved Search in Threat Center
- Sort Cases or Alerts
- View Case and Alert Metrics
- Get Notified About Threat Center
View Case and Alert Metrics
View and build graphs using detection, alert, and case attributes in Dashboards.
To monitor metrics on detections, alerts and cases, view the Threat Center Overview pre-built dashboard or create visualizations in Dashboard using detection, alert, and case attributes.
When you create a visualization, alert attributes are listed under THREAT CENTER > Alerts and case attributes are listed under THREAT CENTER > Cases. You can't create visualizations using case notes.
To create visualizations using alert attributes, you must have the Threat Center Alerts: Read permission. To create visualizations using case attributes, you must have the Threat Center Cases: Read permission.
If you edit case or alert attributes in Threat Center, the changes are reflected in Dashboards visualizations within five minutes.