SA: Investigation Top Values Dashlet

Document created by RSA Information Design and Development Employee on Apr 4, 2016Last modified by RSA Information Design and Development Employee on Apr 4, 2016
Version 2Show Document
  • View in full screen mode
 
  

The Investigation Top Values dashlet allows you to inspect the top values for a specific time period and for a specific meta type on a given appliance. You define the meta data and query parameters in the Add a Dashlet dialog.

To display this dashlet in the Security Analytics dashboard or as part of a custom dashboard, click ic-addList.PNG > Add Dashlet in the dashboard toolbar and select Investigation Top Values.

104InvTopValuesDashlet.png

Features

You define the meta data and query parameters in the Add a Dashlet dialog.

                                 
FeatureDescription
TitleThe title of the dashlet.
ServiceThe name or IP address of the target service.
Time (Relative)

Last 5 minutes
Last 10 minutes
Last 15 minutes
Last 30 minutes
Last Hour
Last 3 Hours
Last 6 Hours
Last 12 Hours
Last 24 Hours
Last 2 Days
Last 5 Days

Meta TypeSelect the meta type from the drop-down list.
QueryComplete the query to further define the results.
Result LimitSelect the number of results to display from the drop-down list.
You are here: References > Investigation Top Values Dashlet

Attachments

    Outcomes