Widgets

You can customize the widgets to optimize the visual display. To customize widgets, switch to edit mode. Click Options > Edit.

• To save changes, click Done.
• To cancel changes, click on Discard.
• To restore the predefined view to the default values, click Options > Restore Defaults.

  Note - Restore Defaults option is only available after you modify a predefined view.

Adding and Customizing Widgets

To add a Widget:

1. Double-click a view or report to open it.
2. Click Options > Edit.
3. Click Add Widget and select the widget type.

   Chart

   

   1. Enter a title.
   2. Select a chart type: vertical bar, horizontal bar, pie, area or line.
   3. Select a data category for the X axis.
   4. Define how the Top Values are calculated (by number of logs, or by traffic).
   5. Set a limit for how many top values to show.
   6. Optional: click Series - split the results into colored groups with different values for the series.

      

   7. Optional: click Customize and define axis titles and legend position.

      

   Timeline

   

   1. Enter a title.
   2. Select a timeline graphical presentation: vertical bar, doughnut, area or line.
   3. Select the data to count.
   4. Advanced - split the results into colored groups, with different values for the Series.
   5. Define the time-granularity. Enter the number of bars or doughnuts to show.

   Table

   

   1. Enter a title.
   2. Manage columns: add, edit, remove, and change the order.
   3. Select a column on the left and define its settings:
      • Enter the number of top values to show.
      • Select how values are sorted.
   4. Select this option to group results with the same value in one row.

   Map

   

   1. Enter a title.
   2. Enter the number of Top Countries to mark.
   3. Select to mark Top Source Countries, Top Destination Countries, or both.
   4. Define how to find the Top Countries (for example, by number of logs or by traffic).

   Infographic

   The infographic widget shows large meaningful values. For example:

   

   Configure an infographic using these settings:

   

   1. Enter a title
   2. Select a field to count. Selecting None means all the logs that match the filter criteria are counted.
   3. Define filter criteria.

      This critieria is in addition to the inherited filters for the report and view layers.

      For more, see Filters.

   4. Optional: Enter an icon name in the field.

      Select a name from the list below. Pay attention to upper and lower case letters and the use of hyphens.

      Icon	Used for
      apps
      attacks
      hosts
      Gateway
      traffic
      usercheck
      users
      new	Audit Logs
      add	Audit Logs
      remove	Audit logs
      modify	Audit logs
      install-policy
      publish
      ips
      anti-bot
      anti-virus
      threat-emulation

   5. Enter primary text that describes the value counted.
   6. Optional: For secondary text, enter a more detailed description.

   Container

   Use a container to unify multiple widgets into one frame. Add a container, then add, edit, or remove the widgets inside it.

   Note - The container widget cannot be added to a container.

   

   1. Enter a title.
   2. Optional: filter at the container level. The filter applies to all internal widgets.
   3. Select the widget order inside the container: Horizontal, Vertical, Grid or Tabs.

   After the container is added to the view, you can configure it further.

   

   1. Remove the widget from the container.
   2. Add a new widget.
   3. Edit the settings for the container, or edit one of the widgets in the list.

   Rich Text

   

   Use this window to add textual explanations to the View text box.

4. Click OK.
5. Select filters for the widget in addition to the inherited filters from the report and view layers. See Filters.
6. Configure settings for the widget.

To customize a widget:

1. Click Options > Edit.
2. Select the widget to customize.
3. Select the graphic presentation that best fits the information you want to see: chart, table, timeline...

   

4. Select filters for the widget in addition to the inherited filters from the report and view layers. (See: Filters).
5. Configure settings for the widget.
6. Delete a widget.

Note - In R80.30 GA the last field is called Samples and accepts integer values. In R80.30 + R80.30 JHA (from sk153152) the field is called Resolution and is a drop-down list with predefined values.

Copying Widgets and Views to Other Locations

You can copy a widget used in one view or report and paste it in another view or report.

To copy a widget to another location:

1. Right-click the required widget.
2. The copy option shows with the name of the widget:

   

3. Select Copy: [widget name]
4. Go to the view or report in which you want to paste the widget.
5. Go to Options and select Edit:

   

6. Right-click an empty space in the view or report.

   From the Paste drop-down menu, select the widget you want to paste:

   

7. Click Done.

Note - When you copy a widget to another view or report, the copied widget does not include the filter of the original view or report, only the filter defined for the copied widget.

To copy a view to another report:

1. Right-click the required view.
2. The copy option shows with the name of the view:

   

3. Select Copy: [view name]
4. Go to the report in which you want to past the view.
5. Go to Options and select Edit:

   

6. Right-click an empty space in the report.
7. From the Paste drop-down menu, select the view you want to paste:

   

8. Click Done.

Note - When you copy a view to another report, the copied view does not include the filter of the original report, only the filter of the copied view.

Filters

The search bar is used to apply on-demand filters, but you can also save filters with the view / report definition.

There are different layers of filters:

1. Filters to apply to the full report.
2. Filters to apply to a view (specified page in a report) and all widgets that this page includes.
3. Filters to apply to the selected widget.

To edit the view filter:

1. Click the + (plus) button to add a filter.
   To delete a filter, click the X button.
2. Select a field.
   To enable free text search, select Custom Filter.
3. Select a comparison method.
4. Select or enter the value.
   You can define multiple values.

Filtering for Active Directory User Groups

You can filter logs, reports, and views for one or more Active Directory groups.

1. In your Access Control Policy, create an Access Role that includes all the Active Directory groups you want to have in the query.
2. Install the Access Control Policy on the Security Gateways.
3. Look at the Identity Awareness login logs, and copy the names of the relevant groups. They usually have the prefix "ad_".
4. Add a filter for the field User Group and type or paste the name of the group that you want to include in the filter. For multiple groups, use a comma-separated list.