Course materials may not be reproduced in whole or in part without the prior written permission of IBM. Objectives After completing this unit, you should be able to perform the following tasks: • Navigate the default dashboard • Customize dashboards
Course materials may not be reproduced in whole or in part without the prior written permission of IBM. Dashboard overview • QRadar SIEM shows the Dashboard tab when you log in. • You can create multiple dashboards. • Each dashboard can contain items that provide summary and detailed information. • Six default dashboards are available. • You can create custom dashboards to focus on your security or operations responsibilities. • Each dashboard is associated with a user. Changes that you make to a dashboard do not affect the dashboards of other users.
Dashboard refresh • In the displayed Pause/Play Refresh dashboard, events and flows refresh every minute unless you click Pause. • Use the Refresh button to manually refresh the displayed data.
Course materials may not be reproduced in whole or in part without the prior written permission of IBM. 11 Dashboard variety • QRadar SIEM includes the following default dashboards: Application Overview Compliance Overview Network Overview System Monitoring Threat and Security Monitoring Vulnerability Management • Use multiple dashboards to better organize data For example, a single user can have the following dashboards: Databases Critical Applications to show log and network activity of these systems.
Creating a custom dashboard Show Dashboard: New Dashboard: Add item: Select a dashboard Create a new dashboard Add an item to view. empty of items. to dashboard.
Managing dashboard items Click Add Item to place additional objects on the dashboard. Click the green icon to detach the object from the interface to the desktop. Click the yellow icon to modify the settings of an object. Click the red icon to delete an object from the dashboard.
Summary Now that you have completed this unit, you should be able to perform the following tasks: • Navigate and customize the user interface • Customize dashboards