Adding a System Widget

The following types of system widgets are available for dashboards:
  • Rank views show the top events by group, such as repeat offenders, or rollup, such as high severity. The types of rank view are risk model, and entity. Risk model views show the top threats or risk models. Entity views show top entities, event scenarios or rollups based on risk score, risk vector, or entity type.
  • Aging views show events over time based on event scenarios or rollups. This type of view is different from rank views for event scenarios and rollups because it shows the event scenario or rollup over time. The rank views show the event scenarios or rollups that have the highest risk score, risk vector or entity type.
  • Risk matrix shows the current threats and their impact to your organization.
  • DIM searches are a list of saved data-in-motion searches.
  • Event searches are a list of saved event searches. Event searches are created with the analyzer.
The rank and aging views use rank views, aging views, incident groups, and incident rollups defined by the administrator. You can only view the entities that you have permission to view. The permissions are set by the
Symantec ICA
administrator.

Adding a Rank View Widget

To add a rank view widget, do the following:
  1. Drag the rank view widget to the Build Dashboard area.
  2. Click (gear) on the widget to edit the settings.
  3. Enter a title for the widget. This title is displayed on the dashboard.
  4. (Risk Model Rank View only) Select the type of ranking. Options are Risk Model or Risk Threat.
  5. (Entity Rank View only) Select the type of entity, rollup or scenario.
  6. (Entity Rank View only) Select the rank type.
  7. (Entity Rank View only for rollup or scenario) Select the rollup or scenario.
  8. (Entity Rank View only for rollup or scenario) Select the rank order. The default sort for scenario is by the last event date in descending order, then by first event date in descending order, and then by the rollup entity's risk score.
  9. (Entity Rank View only for entity) Select the risk score, risk vector or entity collection.
  10. Click
    Save
    .
  11. Click
    Save
    to save the dashboard.

Adding an Aging View Widget

To add an aging view widget, do the following after creating a dashboard:
  1. Drag the aging view widget to the Build Dashboard area.
  2. Click (gear) on the widget to edit the settings.
  3. Enter a title for the widget. This title is displayed on the dashboard.
  4. Click
    New Section
    , and enter a section name.
  5. Click
    Submit
    .
  6. Right-click the section, and select
    Add Scenario Section
    ,
    Add Scenario
    ,
    Add Rollup Section
    , or
    Add Rollup
    .
    A scenario section is a set of similar scenarios, such as high, medium or low risk. A scenario is a single scenario. A roll-up section is similar to a scenario section but for event roll-ups. A roll-up is a single roll-up.
    Only scenarios that have been enabled can be used in an aging view widget.
  7. Enter a name for the section.
  8. Select a scenario or roll-up.
  9. Click
    Submit
    .
  10. (Optional) Add another section, scenario, or rollup.
  11. (Optional) Set the date ranges. The default ranges are Today, 1 - 7 Days, and 8 -30 Days.
  12. (Optional) Click
    Include All Age Range
    option to display the All column. The All column has the events for all the date ranges.
  13. Click
    Save
    .
  14. Click
    Save
    to save the dashboard.

Adding a Risk Matrix Widget

To add a risk matrix widget, do the following after creating a dashboard:
  1. Drag the risk matrix widget to the Build Dashboard area.
  2. Click (gear) on the widget to edit the settings.
  3. Enter a title for the widget. This title is displayed on the matrix.
  4. Select the threat types. Leaving the field blank displays all threat types on the matrix.
  5. Select the impact types. Leaving the field blank displays all impact types on the matrix.
  6. Click
    Save
    .
  7. Click
    Save
    to save the dashboard.

Adding a DIM Search Widget

To add a DIM search widget, do the following after creating a dashboard:
See also:
Creating a Data In Motion Search for information about creating a DIM search
  1. Drag the DIM search widget to the Build Dashboard area.
  2. Click (gear) on the widget to edit the settings.
  3. Enter a title for the widget. This title is displayed on the dashboard.
  4. Enter a label for the new search option. This is the option users select to create a DIM search.
  5. Select the layout for the list of saved searches. Options are horizontal and vertical.
  6. Click
    Save
    .
  7. Click
    Save
    to save the dashboard.

Adding an Event Search Widget

To add an event search widget, do the following after creating a dashboard:
See also:
Creating a Saved Search Using the Analyzer for information about creating an event search
  1. Drag the event search widget to the Build Dashboard area.
  2. Click (gear) on the widget to edit the settings.
  3. Enter a title for the widget. This title is displayed on the dashboard.
  4. Select an event type. Options are Endpoint Protection, Authentication, and Web Activity.
  5. Select the layout for the list of saved searches. Options are Horizontal and Vertical.
  6. Click
    Save
    .
  7. Click
    Save
    to save the dashboard.