This article applies to:
Question:
- Can I monitor the same type of information I get from running a report?
- Can I monitor critical data regarding SIEM on an ongoing basis?
Procedure:
Yes! You can use the options available in the Dashboard Creator to monitor many critical items that happen on the SIEM LP system (highlighted in the screenshot below):
Some of the items you can monitor are similar to the information you can see in reports run on the LP, such as the acquisition rates for each device enabled on the SIEM LP:
Some of the items are more granular output and can display things like the top events coming into the SIEM in the last hour, the top authentication failures for the last week, or the logins for the last day:
You can create and customize dashboards to display the items that are most critical to your organization. You can change the layout to suit your needs, and play them in a dashboard slideshow:
As a last note, you'll want to be sure to save your dashboards:
