Widgets

You can customize the widgets to optimize the visual display. To customize widgets, switch to edit mode. Click Options > Edit.

  • To save changes, click Done.

  • To cancel changes, click on Discard.

  • To restore the predefined view to the default values, click Options > Restore Defaults.

    Note - Restore Defaults option is only available after you modify a predefined view.

Adding and Customizing Widgets

To add a Widget:

  1. Double-click a view or reportClosed Summary of network activity and Security Policy enforcement that is generated by Check Point products, such as SmartEvent. to open it.

  2. Click Options > Edit.

  3. Click Add Widget and select the widget type.

    Chart Settings:

    1. Enter a title.

    2. Select a chart type: vertical bar, horizontal bar, pie, area or line.

    3. Select a data category for the X axis.

    4. Define how the Top Values are calculated (by number of logs, or by traffic).

    5. Set a limit for how many top values to show.

    6. Optional: click Series - Split the results into colored groups with different values for the series.

    7. Optional: click Customize and define axis titles and legend position.

    Timeline Settings:

    1. Enter a title.

    2. Select a timeline graphical presentation: vertical bar, doughnut, area or line.

      Notes:

      • In R81 GA, the last field is called Samples and accepts integer values.

      • In R81 with R80.40 Jumbo Hotfix Accumulator, the field is called Resolution and it is a drop-down list with predefined values.

    3. Select the data to count.

    4. Advanced - split the results into colored groups, with different values for the Series.

    5. Define the time-granularity. Enter the number of bars or doughnuts to show.

    Table Settings:

    1. Enter a title.

    2. Manage columns: add, edit, remove, and change the order.

    3. Select a column on the left and define its settings:

      • Enter the number of top values to show.

      • Select how values are sorted.

    4. Select this option to group results with the same value in one row.

    Map Settings:

    1. Enter a title.

    2. Enter the number of Top Countries to mark.

    3. Select to mark Top Source Countries, Top Destination Countries, or both.

    4. Define how to find the Top Countries (for example, by number of logs or by traffic).

    The infographic widget shows large meaningful values. For example:

    Infographic Settings:

    1. Enter a title

    2. Select a field to count. Selecting None means all the logs that match the filter criteria are counted.

    3. Define filter criteria.

      This critieria is in addition to the inherited filters for the report and view layers.

      For more, see Filters in Widgets.

    4. Optional: Enter an icon name in the field.

      Select a name from the list below. Pay attention to upper and lower case letters and the use of hyphens.

      Icon

      Used for

      apps

       

      attacks

       

      hosts

       

      gateway

       

      traffic

       

      usercheck

       

      users

       

      new

      Audit Logs

      add

      Audit Logs

      remove

      Audit logs

      modify

      Audit logs

      install-policy

       

      publish

       

      ips

       

      anti-bot

       

      anti-virus

       

      threat-emulation

       

    5. Enter primary text that describes the value counted.

    6. Optional: For secondary text, enter a more detailed description.

    Use a container to unify multiple widgets into one frame. Add a container, then add, edit, or remove the widgets inside it.

    Note - The container widget cannot be added to a container.

    Container Settings:

    1. Enter a title.

    2. Optional: filter at the container level. The filter applies to all internal widgets.

    3. Select the widget order inside the container: Horizontal, Vertical, Grid or Tabs.

    After the container is added to the view, you can configure it further.

    1. Remove the widget from the container.

    2. Add a new widget.

    3. Edit the settings for the container, or edit one of the widgets in the list.

    Use this window to add textual explanations to the View text box.

  4. Click OK.

  5. Select filters for the widget in addition to the inherited filters from the report and view layers. See Filters in Widgets.

  6. Configure settings for the widget.

To customize a widget:

  1. In the view where the widget is located, click Options > Edit.

  2. Go to the required widget and click the wheel icon to edit the image properties:.

  3. Edit the required properties.

  4. Click Done.

Copying Widgets to other Locations

You can copy a widget used in one view or report and paste it in another view or report.

To copy a widget to another location:

  1. Right-click the required widget.

  2. The copy option shows with the name of the widget:

  3. Select Copy: [widget name].

  4. Go to the view or report in which you want to paste the widget.

  5. Go to Options and select Edit:

  6. Right-click an empty space in the view or report.

    From the Paste drop-down menu, select the widget you want to paste:

  7. Click Done.

Note - When you copy a widget to another view or report, the copied widget does not include the filter of the original view or report, only the filter defined for the copied widget.

Filters

The search bar is used to apply on-demand filters, but you can also save filters with the view / report definition.

There are different layers of filters:

  1. Filters to apply to the full report.

  2. Filters to apply to a view (specified page in a report) and all widgets that this page includes.

  3. Filters to apply to the selected widget.

To edit the view filter:

  1. Click the + (plus) button to add a filter.
    To delete a filter, click the X button.

  2. Select a field.
    To enable free text search, select Custom Filter.

  3. Select a comparison method.

  4. Select or enter the value.
    You can define multiple values.

Filtering for Active Directory User Groups

You can filter logs, reports, and views for one or more Active Directory groups.

  1. In your Access Control Policy, create an Access Role that includes all the Active Directory groups you want to have in the query.

  2. Install the Access Control Policy on the Security Gateways.

  3. Look at the Identity AwarenessClosed Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. login logs, and copy the names of the relevant groups. They usually have the prefix "ad_".

  4. Add a filter for the field User Group and type or paste the name of the group that you want to include in the filter. For multiple groups, use a comma-separated list.