SA: Investigation Top Values Dashlet

Document created by RSA Information Design and Development on Apr 4, 2016Last modified by RSA Information Design and Development on Apr 4, 2016
Version 2Show Document
  • View in full screen mode
 
  

The Investigation Top Values dashlet allows you to inspect the top values for a specific time period and for a specific meta type on a given appliance. You define the meta data and query parameters in the Add a Dashlet dialog.

To display this dashlet in the Security Analytics dashboard or as part of a custom dashboard, click ic-addList.PNG > Add Dashlet in the dashboard toolbar and select Investigation Top Values.

104InvTopValuesDashlet.png

Features

You define the meta data and query parameters in the Add a Dashlet dialog.

                                 
FeatureDescription
TitleThe title of the dashlet.
ServiceThe name or IP address of the target service.
Time (Relative)

Last 5 minutes
Last 10 minutes
Last 15 minutes
Last 30 minutes
Last Hour
Last 3 Hours
Last 6 Hours
Last 12 Hours
Last 24 Hours
Last 2 Days
Last 5 Days

Meta TypeSelect the meta type from the drop-down list.
QueryComplete the query to further define the results.
Result LimitSelect the number of results to display from the drop-down list.
You are here: References > Investigation Top Values Dashlet

Attachments

    Outcomes