This topic describes the structure of Security Analytics dashboards and how to use their features.
A dashboard is a group of dashlets that give you the ability to view in one space key snapshots of the various modules that you consider important. The Security Analytics Unified module has a dashboard. You can compose dashboards to glean high-level information and metrics that portray the overall picture of a Security Analytics deployment, displaying only the information that is most relevant to day-to-day operations.
When you log onto Security Analytics, the Security Analytics Default dashboard is displayed.
The Default Dashboard
The default dashboard for the Unified module is configured to display specific dashlets in specific positions. The default dashboard serves as an example of dashboard composition and a starting point for customization.
- You can customize the information on the default dashboard by editing dashlets, adding dashlets, moving dashlets, maximizing dashlets, and deleting dashlets.
- After modifying the default dashboard, you can restore the default dashboard to its original layout.
- The default dashboard cannot be deleted.
You can create custom dashboards to serve a particular purpose; for example, to represent a specific geographical or functional area of the network. Each custom dashboard is appended to the Dashboard Selection List.
Once custom dashboards are created, you can:
- Switch between dashboards by selecting an option from the Dashboard Selection List
- Delete any custom dashboard
- Import or export a dashboard
Composing Dashboards provides detailed information on working with dashboards and dashlets.
Each dashboard has:
- The dashboard toolbar
- The dashboard title and the Dashboards Selection List
- Zero or more dashlets
Next to the current dashboard title is the dashboard toolbar. The dashboard toolbar allows various operations on dashboards and dashlets.
|Add Dashlet||Displays the Add a Dashlet dialog, where you add a dashlet to the current dashboard.|
|Change Dashboard Layout||Displays the Change Layout dialog, where you change the layout of the dashboard to one of five options.|
|Create New Dashboard||Displays the Add a Dashboard dialog, where you define a custom dashboard.|
|Remove Dashboard||Deletes a custom dashboard. The default dashboard cannot be deleted.|
|Rename Dashboard||Displays the Rename Dashboard dialog, where you change the dashboard title.|
|Restore Default Dashboard||Restores the default dashboard to its original appearance, with the default dashlets in their original positions.|
|Export Dashboard||Creates a .cfg file containing the structure of the current dashboard.|
|Import Dashboard||Adds a dashboard based on the previously exported .cfg file.|
The dashboard title reflects the current module; for example, Dashboard.
Dashboard Selection List
You can access custom dashboards on the Dashboard selection list. When you select a custom dashboard, its title is displayed below the Security Analytics toolbar.
Security Analytics uses dashlets to display focused subsets of system information, services, jobs, resources, subscriptions, rules, Incident Queue activity, Incident Analysts activity, and other information.
Security Analytics modules can display only those dashlets presented in the Add a Dashlet dialog. The Unified dashboard, as the name suggests, offers all Security Analytics dashlets.
Controls for a dashlet are in the title bar. All dashlets use a common set of controls, and only those that apply to the particular dashlet appear in the title bar.