SA: Investigation Top Values Dashlet

Document created by RSA Information Design and Development on Jul 21, 2016Last modified by RSA Information Design and Development on Jul 24, 2016
Version 2Show Document
  • View in full screen mode
 

The Investigation Top Values dashlet allows you to inspect the top values for a specific time period and for a specific meta type on a given appliance. You define the meta data and query parameters in the Add a Dashlet dialog.

To display this dashlet in the Security Analytics dashboard or as part of a custom dashboard, click ic-addList.PNG > Add Dashlet in the dashboard toolbar and select Investigation Top Values.

104InvTopValuesDashlet.png

Features

You define the meta data and query parameters in the Add a Dashlet dialog.

                                   
FeatureDescription

Title

The title of the dashlet.

Service

The name or IP address of the target service.

Time (Relative)

Last 5 minutes
Last 10 minutes
Last 15 minutes
Last 30 minutes
Last Hour
Last 3 Hours
Last 6 Hours
Last 12 Hours
Last 24 Hours
Last 2 Days
Last 5 Days

Meta Type

Select the meta type from the drop-down list.

Query

Complete the query to further define the results

Result Limit

Select the number of results to display from the drop-down list.

You are here: References > Investigation Top Values Dashlet

Attachments

    Outcomes