Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

Purpose

This Activeboard provides metrics surrounding your domain’s data source. It includes tables that have a significant decrease in ingestion compared to the historical averages, total volume seen over the last month, hourly volume breakdown, as well as new and missing hosts, users, and firewalls.

...

Pre-requisites

To use the Data Source Monitor Activeboard you must have the following sources available on your domain:

  • siem.logtrust.collector.counter

  • box.all.win

  • box.unix

  • firewall.all.traffic

Open Security Operations Executive Overview

Once you have installed the application, you can access the Activeboard in the following ways:

Go to Exchange in the navigation pane and look for the Activeboard you want to open. Click Open.

Image Added

Go to Activeboards in the navigation paneand use the filter to open the Activeboard you downloaded.

Image Added

Exploring the Activeboard