Purpose
This Activeboard provides metrics surrounding your domain’s data source. It includes tables that have a significant decrease in ingestion compared to the historical averages, total volume seen over the last month, hourly volume breakdown, as well as new and missing hosts, users, and firewalls.
Pre-requisites
To use the Data Source Monitor Activeboard you must have the following sources available on your domain:
siem.logtrust.collector.counterbox.all.winbox.unixfirewall.all.traffic
Open Security Operations Executive Overview
Once you have installed the application, you can access the Activeboard in the following ways:
Go to Exchange in the navigation pane and look for the Activeboard you want to open. Click Open.
Go to Activeboards in the navigation pane and use the filter to open the Activeboard you downloaded.