Dashboards

Dashboards

The Dashboards section lists all Fabric-enabled LogPoint dashboards. LPSM provides different actions to view and manage the dashboards from a central location.

Dashboard

You can perform the actions individually or in bulk. However, the dashboards of Fabric-enabled LogPoint instances must be compatible with each other to perform any action. The version compatibility of dashboard actions is:

Fabric-enabled LogPoint	Compatible Fabric-enabled LogPoint Versions
6.11.x	6.10.x to 6.12.x
6.12.x	6.10.x to 6.12.x
7.0.x	6.10.x to 7.0.x
7.1.x	6.11.x to 7.2.0
7.2.x	6.11.x to 7.2.x

Add Dashboards in a Fabric-enabled LogPoint

You can add a dashboard on behalf of any user of Fabric-enabled LogPoint from the Dashboard section. However, to do this, you should have the Create permission for dashboards.

1. Click the + icon beside the Quick Start tab.

   The + icon is hidden if you do not have sufficient permission to create dashboards.

   

2. Select the LogPoint Pool where you want to create the dashboard. The Pool drop-down lists all the LogPoint pools created in the LPSM.

3. Select the LogPoint Machine where you want to create the dashboard. The Machine drop-down lists all the LogPoint machines within the selected LogPoint Pool.

4. Select the LogPoint User. The User drop-down lists all the LogPoint users within the selected LogPoint machine. The dashboard is created on behalf of the selected user.

5. Enter a Dashboard Name for the dashboard.

6. Click Submit.

The Dashboard is populated in the Quick Start tab and is subscribed by default.

In LPSM, the data populated in a dashboard widget is user-specific. However, when an LPSM user drills down into the search result of a dashboard widget, the user is redirected to the Search page. At this stage, the user automatically inherits the administrative privileges of the associated Fabric-enabled LogPoint, which provides access to all Repos of that Fabric-enabled LogPoint.

For example, consider a Fabric-enabled LogPoint named “Fabric_LogPoint_A” with a user named “John” who has access to only one Repo, “Repo_John.” The same LogPoint also contains three additional Repos: “default,” “_logpoint,” and “LogPoint_Alert.” In LPSM, a new dashboard tab is created on behalf of John. During the creation of the dashboard widget, “Repo_John” is the only available Repo option, and the data populated in the dashboard widget is extracted exclusively from “Repo_John.” However, when the user drills down into the data from the dashboard widget, the user is navigated to the Search section. The resulting search query then has access to all available Repos—“default,” “_logpoint,” and “LogPoint_Alert”—for the associated “Fabric_LogPoint_A.”

Dashboard Actions

After you add the subscribed dashboards to the Dashboard, you can add, edit, or remove widgets or search from the dashboard.

Add Widgets

1. Go to Dashboard from the navigation menu.

2. Select the subscribed dashboard where you want to add the widget.

3. Click Add Widget of the subscribed dashboard from the My Subscriptions page.

   

4. Enter a Name for the new widget.

5. Enter a Query or click Select to choose any query from the Advanced Query Picker.

   From the Advanced Query Picker, select a query from My Search History, My Saved Searches, Vendor Searches, Search Labels, or Live Searches.

6. Select the Repos from where you want to extract logs.

7. Enter a Description for the widget.

8. Select a Time Range for the logs in the repos and click Finish.

While configuring repos for a new dashboard, make sure to select only the concerned repos, or it might impede the system performance.

Change Repos

You can update the repos for all the widgets of a particular dashboard tab.

1. Go to Dashboard from the navigation menu.

2. Select the subscribed dashboard where you want to change the repos.

3. Click Change Repos.

   

4. Select the option from Repos for the Widgets.

5. Click Ok.

Auto Arrange Widgets

The size and position of a widget depend on your preference. However, the system can also arrange the widgets automatically.

1. Go to Dashboard from the navigation menu.

2. Select the subscribed dashboard where you want to auto arrange the widgets.

3. Click Auto Arrange.

Search from Dashboard

You can directly navigate to the search page using the widget query of a dashboard.

1. Go to Dashboard from the navigation menu.

2. Select the widget of the subscribed dashboard to search.

3. Hover the mouse at the upper right corner of the concerned widget and click the Widget Options () icon.

   You can see the following editing icons for the widget.

4. Click the Search () icon to navigate to the Search page and perform a search operation for the given widget configuration.

   • The Search () icon allows to search logs as an admin user even if the dashboard widget is specific to a particular LogPoint user.

   • You can use the Details () icon to view the details of the concerned widget.

You can now search the indexed logs coming from Fabric-enabled LogPoints for the corresponding widget query. Refer to the Search Page section for more details about LPSM Search.

Edit Widgets

1. Go to Dashboard from the navigation menu.

2. Select the widget of the subscribed dashboard to edit.

3. Hover the mouse at the upper right corner of the concerned widget and click the Widget Options () icon.

   You can see the following editing icons for the widget:

4. Click the Edit () icon to edit the widget.

You can monitor the activities of the widget query through entities such as Table, Area chart, Line chart, Bar chart, Column chart, Gauge chart, Display chart, Bubble chart, Donut chart, and ATT&CK chart. However, the display types that are available for the result depends on the kind of search query. For more information on the display types, refer to the Widgets section of Logpoint Dashboard and Visualization guide.

Remove Widgets

1. Go to Dashboard from the navigation menu.

2. Select the widget of the subscribed dashboard to remove.

3. Hover the mouse at the upper right corner of the concerned widget and click the Widget Options () icon.

   You can see the following editing icons for the widget:

   Widget Icons

4. Click the Remove () icon to remove the widget.

The size and position of a widget depend on your preference. However, the system can also arrange the widgets automatically.

1. Go to Dashboard from the navigation menu.

2. Select the subscribed dashboard where you want to auto arrange the widgets.

3. Click Auto Arrange.

Share Dashboards from Dashboard Page

1. Go to Dashboard.

2. Select the dashboard you want to share and click Share.

3. Select a User Group. All the users in that user group are listed in the drop-down.

4. Select the Read, Edit, or Full permission for the users.

5. Click Submit.

Share a Dashboard from Logpoint Configuration Page

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Click the Share () icon from the Actions column for the dashboard.

3. Select a User Group. All the users in that user group are listed in the drop-down.

4. Select the Read, Edit, or Full permission for the users.

5. Click Submit.

You can Unshare dashboards using the same method.

Push Dashboards

You can push dashboards to replicate it for Fabric-enabled LogPoint users across the same pool or different pools.

Follow the steps below to push dashboards:

1. Go to Settings >> LogPoint Configuration >> Dashboard.

2. Select the dashboards and click Push.

   Make sure the selected dashboards are compatible with each other. Refer to the version compatibility table in the Dashboard section.

   Push:

   Push Dashboard:

3. Select the pool, LogPoint, and user where you want to push the selected dashboards.

   Make sure the selected dashboards are compatible with each other. Refer to the version compatibility table in the Dashboard section.

4. Click Push.

Push History

You can click the Push History () button to check the push history.

The Push History page lists the Push Summary, Status, Date, and Actions of all push attempts.

Click the Retry () icon from the Actions column to retry the failed push attempt.

Click the Details () icon from the Actions column to open the Push Detail page.

For failed push attempts:

• Click the Retry () icon from the Actions column to retry individual failed push attempts.

• Click the Details () icon from the Actions column to view the error details about failed push attempts.

Export Dashboards

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Select the dashboards and click Export.

The .pak file of the selected dashboards is downloaded to your local machine.

Once you download the .pak file to your local machine, you can upload it to any other Fabric-enabled LogPoint from the Analytics Packages section.

Clone Dashboard

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Click the Clone () icon from the Actions column of the dashboard.

3. Select the LogPoint user from the drop-down menu. The Pool and the Machine cannot be changed.

4. Enter a Name for the cloned dashboard.

5. Check the Replace Existing? checkbox to replace the existing dashboard with the same name.

6. Click Clone.

Activate Dashboards

A dashboard created by the LPSM on behalf of the Fabric-enabled LogPoint is automatically activated. However, when the dashboard is deleted from the Fabric-enabled LogPoint, it can be activated again from the LPSM.

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Click the Activate () icon from the Actions column for the concerned dashboard.

You can Deactivate dashboards using the same method.

Lock Dashboards

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Click the Lock () icon from the Actions column of the dashboard.

• Locked dashboards are only viewable and they cannot be edited.

• You can Unlock dashboards using the same method.

Delete Dashboards

1. Go to Settings >> LogPoint Configuration >> Dashboards.

2. Click the Delete () icon from the Actions column for the dashboard.

   1. To delete multiple dashboards, select the concerned dashboards. Click the More drop-down and choose Delete Selected.

   2. To delete all the dashboards, click the More drop-down and choose Delete All.

3. Click Yes.

Dashboard Categories

There are four categories of dashboards: My Dashboard, Used Dashboard, Vendor Dashboard, and Shared Dashboard. They can be accessed from the drop-down at the top-left corner of the panel.

Category of Dashboards

My Dashboard

Lists all the dashboards created by LPSM on behalf of Fabric-enabled LogPoints and all the dashboards created by the Fabric-enabled LogPoint.

Used Dashboard

Lists all the used dashboards.

Vendor Dashboard

Lists all the dashboards provided in your application packages.

Shared Dashboard

Lists all the shared dashboards.

You can click the Clone () icon from the Actions column to use the shared and vendor dashboards. Provide a name for the clone and hit enter. The dashboard is activated, and the clone appears under the My Dashboard option.

Subscribe to Dashboards

The dashboards of the Fabric-enabled LogPoints have to be subscribed to view and edit their data.

Subscribe to Dashboards

1. Go to Dashboard from the navigation menu.

2. Click Subscribe

   The pop-up panel lists all the dashboards of the Fabric-enabled LogPoints, categorizing them on the basis of the LogPoint Pool. The panel also includes the names of various Fabric-enabled LogPoints and the users who created the dashboards.

   Click Reload to view the latest configuration and changes made in the dashboards of the Fabric-enabled LogPoints.

3. Select the dashboards from the Fabric-enabled LogPoint Pools.

4. Click Save. The subscribed dashboards from the selected pools are populated under the Quick Start tab.

5. Click the Add To Dashboard button of the corresponding subscribed dashboard to display it in a new tab.

The subscribed dashboard tab can hold multiple widgets. Each widget within a dashboard displays data in graphical forms such as charts, lists, and tables. If needed, you can change the width, height, and positioning of the widget. The data in the widgets are updated in real time.

• If a pool is selected while subscribing dashboards, the new dashboards added in the Fabric-enabled LogPoints of that pool are subscribed automatically.

• If any of the Fabric-enabled LogPoints is down or unreachable, their corresponding subscribed dashboards are grayed out as shown below:

  

• When one of the Fabric-enabled LogPoints is down, its corresponding dashboard cannot be selected or unselected individually. However, when a pool is selected (or unselected), all the subscribed dashboards get selected (or unselected) irrespective of any Fabric-enabled LogPoints being down or unreachable.

Unsubscribe to Dashboards

1. Go to Dashboard from the navigation menu.

2. Click the Unsubscribe button of the dashboard.

3. Click the Subscribe button to open the Subscribe Dashboard pop-up panel to unsubscribe dashboards in bulk. You can now deselect the concerned dashboards to unsubscribe them.