Dashboards

LogicHub provides a default system overview dashboard and a MITRE dashboard that is based on MITRE data. You can also define custom dashboards, as described in Create a dashboard.

📘

Note

To view or manage dashboards, you must be in a group that has Dashboard permission. For more information, see Manage Users.

System Overview Dashboard

The default system overview dashboard components depict the current system metrics by way of charts and numeric values. Each component display includes the type of metric, the data presentation, and the calculation period (last day, last 14 days), if appropriate.

The dashboard is updated every 10 minutes.

This dashboard opens when you first sign in to LogicHub and is also accessible at any time by selecting Dashboard on the left navigation.

The dashboard allows you to view the timezone for System Overview, Use Case, and MITRE Dashboard. The timezone will not be visible for custom dashboards.

To change the timezone settings on the dashboard:

  • Go to Settings > Account on the left navigation.
  • Click on the Timezone tab and select the timezone from the Default Timezone for System Dashboards drop-down based on your preference.

📘

Note

Only administrators can change the dashboard timezone. If you're a non-administrator contact your administrator to change the timezone.

To view another dashboard, click the arrow to the right of the System Dashboard header and select from the drop-down list.

You can find out about the information displayed in the dashboard charts by hovering over the information icon or the chart elements.

📘

Note

The dashboard data are generated by a few playbooks and associated streams that are shipped out of the box:

  • system-oob-dashboard-flow-1
  • system-oob-dashboard-flow-2
  • system-oob-dashboard-flow-3
  • system-mitre-coverage-dashboard-flow-1
  • system-mitre-coverage-dashboard-flow-2

These are created by LogicHub and cannot be edited or deleted.

Clickthrough Buttons on the Widget

For every custom dashboard, a playbook and stream icons are introduced on the widget. Click on these icons on the widget to navigate to the playbook and stream for which the dashboard is created.

  • If you create a widget based on the playbook you will see only the playbook icon. Click on the Playbook icon to navigate to the datasource from which the playbook is created.
  • If you create a widget based on DataSource stream in that case, you will be able to view both the icons, the playbook, and steam. Click on the Streams icon to navigate to the Streams listing page. Click on the Playbook icon to navigate to the above stream associated Playbook.

A playbook opens up in Easy Mode by default. You can change to open the playbook in Easy Mode or Advanced Mode in User Profile on your Profile menu in the left navigation by enabling the buttons.

MITRE Dashboard

This dashboard reports on activity related to the MITRE threat detection metrics.

To access the MITRE Dashboard, select Mitre Dashboard from the dashboard header drop-down list.


Did this page help you?