Purpose
Data Sources Insight Activeboard will help you identify your Devo tables' data sources and get the data sources' history. You will see the number of machines sending events and the number of events sent by them. Moreover, it is possible to observe if data sources are decreasing.
Note
Once you have the Activeboard installed, please make sure you select a Destination Tag to see data in the Activeboard.
Pre-requisites
To use the Data Sources Insight Activeboard, you must have the following data sources available on your domain:
siem.logtrust.collector.counterlearn moreauth.okta.systemlearn more
Open Data Sources Insight Activeboard
Once you have installed the application, you can access the Activeboard in the following ways:
Go to Exchange in the navigation pane and look for the Activeboard you want to open. Click Open.
Go to Activeboards in the navigation pane and use the filter to open the Activeboard you downloaded.
Know more about Activeboards
Refer to Manage and filter Activeboards article to know how to work with Activeboards.
Exploring the Activeboard
When opening the Data Sources Insight Activeboard the following widgets with this information display:
Number of machines sending events
Destination tag
Filter names of sending machines
Change in the number of senders
Number of events sent by each machine
Filtered list
Load data takes too long
Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to Aggregation tasks article to learn how to do it.