Activeboard: Devo Web Activity Monitoring

[ 1 Purpose ] [ 2 Prerequisites ] [ 3 Open Activeboard ] [ 4 Use Activeboard ]

Purpose

This Activeboard allows you to monitor Devo Web Activity of all users in your Devo domain. It gives you a high-level audit about:

Users: login, location, activity, change of role, etc.
Alerts: changes in the alerts.
Others: Relay, Lookups, Aggregation tasks, Synthesis Tables, and Reinjection activity

Global filters
Filter by User: Select input	Filter by Company: Select input
User audit
Logins: Column chart widget	Activities: Voronoi widget	Global changes in IDP Role Mapping: Table widget
User Location: Heatmap widget	User Activity: Voronoi widget	Filter for users actions: Select input
Logins by Location: Table widget	Filter for changes on roles/IDP mapping: Select input	Users Actions: Table widget
Logins by Credentials: Table widget	Global changes in roles: Table widget
Alerts audit
Filter action for alerts audit widgets: Select input	Changes in Alerts: Table widget	Changes in Alerts by UserEmail: Line chart widget
Changes in Alerts Timeline by User: Column chart widget
Relay audit
Changes in Relay Timeline by User: Column chart widget	Global changes in the relays: Table widget	Rule changes in the relays: Table widget
Lookup audit
Filter action for lookup audit: Select input	Lookups Actions: Table widget	Lookups Changed Summary: Pie chart widget
Changes in Lookup Timeline by User: Column chart widget
Aggregation task audit
Filter action for aggregation task audit: Select input	Aggregation Task: Column chart widget	Aggegation Task Actions: Table widget
Synthesis audit
Filter action for synthesis table audit: Select input	Synthesis tables user action: Table widget	Synthesis tables action: Voronoi widget
Changes in Synthesis Tables Timeline by User: Column chart widget
Finders audit
Filter action for finders audit: Select input	Finders user action: Table widget	Finders actions: Voronoi widget
Finder actions timeline: Column chart widget
Reinjection audit
Filter action for reinjections audit: Select input	Reinjections user action: Table widget	Reinjections action: Voronoi widget
Reinjections actions timeline: Column chart widget

Prerequisites

To use this Activeboard, you must have the following data sources available on your domain:

siem.logtrust.web.activity ^{learn more}
siem.logtrust.web.navigation ^{learn more}

Open Activeboard

Once you have installed the Activeboard, you can use the Open button at the top right of the card in Exchange to access it and see the different widgets populated with the relevant data. You can also access the Activeboard area via the Navigation pane.

Data loading takes too long?

Sometimes some widgets take time to upload the data, it is possible to speed up the process by creating aggregation tasks. Refer to the Aggregation tasks article to learn how to do it.

Use Activeboard

After installing and opening the Activeboard, you can use its widgets to visualize and monitor data. To do this, each widget offers a variety of customization and visualization options. Refer to Using widgets and Using inputs to know them all.