The Dashboards section lists all Fabric-enabled LogPoint dashboards. LPSM provides different actions to view and manage the dashboards from a central location.
Dashboard¶
You can perform the actions individually or in bulk. However, the dashboards of Fabric-enabled LogPoint instances must be compatible with each other to perform any action. The version compatibility of dashboard actions are:
Fabric-enabled LogPoint |
Compatible Fabric-enabled LogPoint Versions |
|---|---|
6.11.x |
6.10.x to 6.12.x |
6.12.x |
6.10.x to 6.12.x |
7.0.x |
6.10.x to 7.0.x |
7.1.x |
6.11.x to 7.2.0 |
7.2.x |
6.11.x to 7.2.x |
You can add a dashboard on behalf of any user of Fabric-enabled LogPoint from the Dashboard section. However, to do this, you should have the Create permission for dashboards.
Click the + icon beside the Quick Start tab.
Note
The + icon is hidden if you do not have sufficient permission to create dashboards.
Add Dashboard¶
Select the LogPoint Pool where you want to create the dashboard. The Pool drop-down lists all the LogPoint pools created in the LPSM.
Select the LogPoint Machine where you want to create the dashboard. The Machine drop-down lists all the LogPoint machines within the selected LogPoint Pool.
Select the LogPoint User. The User drop-down lists all the LogPoint users within the selected LogPoint machine. The dashboard is created on behalf of the selected user.
Enter a Dashboard Name for the dashboard.
Click Submit.
The Dashboard is populated in the Quick Start tab and is subscribed by default.
Note
In LPSM, the data populated in the dashboard widget is user-specific. However, when the LPSM Users drill-down on the search result of a dashboard widget, they are forwarded to the Search page. They automatically have the administrative privilege of that Fabric-enabled LogPoint, which means they have access to all the Repos of the Fabric-enabled LogPoint.
For, example, let’s say a Fabric-enabled LogPoint “Fabric_LogPoint_A” has a user named “John” with access to only one Repo named “Repo_John.” This LogPoint has three other Repos named “default,” “_logpoint”, and “LogPoint_Alert.” Now in LPSM, a new dashboard tab is created on behalf of John. Here, while creating the dashboard widget, the only available repo option is “Repo_John.” Also, the data populated in the dashboard is extracted from the repo “Repo_John”. However, upon drill down of the data from the dashboard widget, the LPSM user gets navigated to the Search section. The search query thus performed gets access to all the available Repos: “default,” “_logpoint”, and “LogPoint_Alert” for that particular “Fabric_LogPoint_A.”
After you add the subscribed dashboards to the Dashboard, you can add, edit, or remove widgets or search from the dashboard.
Go to Dashboard from the navigation menu.
Select the subscribed dashboard where you want to add the widget.
Click Add Widget of the subscribed dashboard from the My Subscriptions page.
Add Widget¶
Create Widget - Step 1¶
Enter a Name for the new widget.
Enter a Query or click Select to choose any query from the Advanced Query Picker.
Advanced Query Picker¶
From the Advanced Query Picker, select a query from My Search History, My Saved Searches, Vendor Searches, Search Labels, or Live Searches.
Select the Repos from where you want to extract logs.
Enter a Description for the widget.
Select a Time Range for the logs in the repos and click Finish.
Warning
While configuring repos for a new dashboard, make sure to select only the concerned repos, or it might impede the system performance.
You can update the repos for all the widgets of a particular dashboard tab.
The size and position of a widget depend on your preference. However, the system can also arrange the widgets automatically.
Go to Dashboard from the navigation menu.
Select the subscribed dashboard where you want to auto arrange the widgets.
Click Auto Arrange.
Auto Arrange¶
You can directly navigate to the search page using the widget query of a dashboard.
Go to Dashboard from the navigation menu.
Select the widget of the subscribed dashboard to search.
Hover the mouse at the upper right corner of the concerned widget and click the Widget Options (
) icon.
You can see the following editing icons for the widget.
Widget Icons¶
Click the Search (
) icon to navigate to the Search page and perform a search operation for the given widget configuration.
Note
The Search () icon allows to search logs as an admin user even if the dashboard widget is specific to a particular LogPoint user.
You can use the Details (
) icon to view the details of the concerned widget.
You can now search the indexed logs coming from Fabric-enabled LogPoints for the corresponding widget query. Refer to the Search Page section for more details about LPSM Search.
Go to Dashboard from the navigation menu.
Select the widget of the subscribed dashboard to edit.
Hover the mouse at the upper right corner of the concerned widget and click the Widget Options () icon.
You can see the following editing icons for the widget:
Widget Icons¶
Click the Edit (
) icon to edit the widget.
Note
You can monitor the activities of the widget query through entities such as Table, Area chart, Line chart, Bar chart, Column chart, Gauge chart, Display chart, Bubble chart, Donut chart, and ATT&CK chart. However, the display types that are available for the result depends on the kind of search query. For more information on the display types, refer to the Editing Widgets section of LogPoint Dashboard and Visualization guide.
Go to Dashboard from the navigation menu.
Select the widget of the subscribed dashboard to remove.
Hover the mouse at the upper right corner of the concerned widget and click the Widget Options () icon.
You can see the following editing icons for the widget:
Widget Icons¶
Click the Remove (
) icon to remove the widget.
The size and position of a widget depend on your preference. However, the system can also arrange the widgets automatically.
Go to Dashboard from the navigation menu.
Select the subscribed dashboard where you want to auto arrange the widgets.
Click Auto Arrange.
Auto Arrange¶
Go to Settings >> LogPoint Configuration >> Dashboards.
Click the Share (
) icon from the Actions column for the dashboard.
Select a User Group. All the users in that user group are listed in the drop-down.
Select the Read, Edit, or Full permission for the users.
Click Submit.
Note
You can Unshare dashboards using the same method.
You can push dashboards to replicate it for Fabric-enabled LogPoint users across the same pool or different pools.
Follow the steps below to push dashboards:
Go to Settings >> LogPoint Configuration >> Dashboard.
Select the dashboards and click Push.
Note
Make sure the selected dashboards are compatible with each other. Refer to the version compatibility table in the Dashboard section.
Push¶
Push Dashboard¶
Select the pool, LogPoint, and user where you want to push the selected dashboards.
Note
Make sure the selected dashboards are compatible with each other. Refer to the version compatibility table in the Dashboard section.
Click Push.
Push History
You can click the Push History (
) button to check the push history.
Push History¶
The Push History page lists the Push Summary, Status, Date, and Actions of all push attempts.
Click the Retry (
) icon from the Actions column to retry the failed push attempt.
Click the Details (
) icon from the Actions column to open the Push Detail page.
Push Detail¶
Note
For failed push attempts:
Click the Retry () icon from the Actions column to retry individual failed push attempts.
Click the Details () icon from the Actions column to view the error details about failed push attempts.
Go to Settings >> LogPoint Configuration >> Dashboards.
Select the dashboards and click Export.
Export¶
The .pak file of the selected dashboards is downloaded to your local machine.
Note
Once you download the .pak file to your local machine, you can upload it to any other Fabric-enabled LogPoint from the Analytics Packages section.
Go to Settings >> LogPoint Configuration >> Dashboards.
Click the Clone (
) icon from the Actions column of the dashboard.
Clone Dashboard¶
Select the LogPoint user from the drop-down menu. The Pool and the Machine cannot be changed.
Enter a Name for the cloned dashboard.
Check the Replace Existing? checkbox to replace the existing dashboard with the same name.
Click Clone.
Note
A dashboard created by the LPSM on behalf of the Fabric-enabled LogPoint is automatically activated. However, when the dashboard is deleted from the Fabric-enabled LogPoint, it can be activated again from the LPSM.
Go to Settings >> LogPoint Configuration >> Dashboards.
Click the Activate (
) icon from the Actions column for the concerned dashboard.
Note
You can Deactivate dashboards using the same method.
Go to Settings >> LogPoint Configuration >> Dashboards.
Click the Lock (
) icon from the Actions column of the dashboard.
Note
Locked dashboards are only viewable and they cannot be edited.
You can Unlock dashboards using the same method.
Go to Settings >> LogPoint Configuration >> Dashboards.
Click the Delete (
) icon from the Actions column for the dashboard.
To delete multiple dashboards, select the concerned dashboards. Click the More drop-down and choose Delete Selected.
Delete Selected¶
To delete all the dashboards, click the More drop-down and choose Delete All.
Delete All¶
Click Yes.
There are four categories of dashboards: My Dashboard, Used Dashboard, Vendor Dashboard, and Shared Dashboard. They can be accessed from the drop-down at the top-left corner of the panel.
Category of Dashboards¶
Lists all the dashboards created by LPSM on behalf of Fabric-enabled LogPoints and all the dashboards created by the Fabric-enabled LogPoint.
Lists all the used dashboards.
Lists all the dashboards provided in your application packages.
Lists all the shared dashboards.
Note
You can click the Clone () icon from the Actions column to use the shared and vendor dashboards. Provide a name for the clone and hit enter. The dashboard is activated, and the clone appears under the My Dashboard option.
The dashboards of the Fabric-enabled LogPoints have to be subscribed to view and edit their data.
Go to Dashboard from the navigation menu.
Click Subscribe
Subscribe Dashboard¶
Subscribe Dashboard¶
The pop-up panel lists all the dashboards of the Fabric-enabled LogPoints, categorizing them on the basis of the LogPoint Pool. The panel also includes the names of various Fabric-enabled LogPoints and the users who created the dashboards.
Click Reload to view the latest configuration and changes made in the dashboards of the Fabric-enabled LogPoints.
Select the dashboards from the Fabric-enabled LogPoint Pools.
Selected Dashboards¶
Click Save. The subscribed dashboards from the selected pools are populated under the Quick Start tab.
Subscribed Dashboards¶
Click the Add To Dashboard button of the corresponding subscribed dashboard to display it in a new tab.
Add to Dashboard¶
The subscribed dashboard tab can hold multiple widgets. Each widget within a dashboard displays data in graphical forms such as charts, lists, and tables. If needed, you can change the width, height, and positioning of the widget. The data in the widgets are updated in real time.
Note
If a pool is selected while subscribing dashboards, the new dashboards added in the Fabric-enabled LogPoints of that pool are subscribed automatically.
If any of the Fabric-enabled LogPoints is down or unreachable, their corresponding subscribed dashboards are grayed out as shown below:
Dashboards Grayed Out¶
Dashboards Grayed Out¶
When one of the Fabric-enabled LogPoints is down, its corresponding dashboard cannot be selected or unselected individually. However, when a pool is selected (or unselected), all the subscribed dashboards get selected (or unselected) irrespective of any Fabric-enabled LogPoints being down or unreachable.
Go to Dashboard from the navigation menu.
Click the Unsubscribe button of the dashboard.
Unsubscribe¶
Click the Subscribe button to open the Subscribe Dashboard pop-up panel to unsubscribe dashboards in bulk. You can now deselect the concerned dashboards to unsubscribe them.
