Dashboards are an effective tool for monitoring high-priority network traffic or troubleshooting an issue. You can monitor general information about your network from built-in system dashboards, or build a custom dashboard to create a personalized view of metrics that are important to you.
A dashboard is an HTML page that displays real-time and historic metric data. Dashboards consolidate multiple metrics into a central location where you can investigate and share data. In this guide, you will learn about dashboard features and find links to dashboard resources and procedures.
Here are some definitions you should know about dashboards in the ExtraHop system:
- Dashboard dock
- The left pane of the dashboard page, which provides access to all of your dashboards. Dashboards are organized within menus and folders.
- A compartment within the dashboard layout that contains widgets.
- A configurable component for displaying metric data and information. Charts are the most common widget found in dashboards.
- Time Selector
- A tool that changes the time interval for the entire dashboard. You can also change the time interval for a specific region within the dashboard.
A dashboard is a launching point into data analysis and troubleshooting. When you observe a metric value that raises questions, a dashboard provides the following options for interacting with metric data and finding answers.
- Change the time interval
- Observe how data changes over time in the following ways:
- Change the dashboard source
- If you are viewing a dashboard with dynamic sources, you can change the source of the
information you are viewing. For example, you could create a dashboard that shows you the
total number of HTTP errors for a device. Then, you could switch the source for the
dashboard to any device on your ExtraHop system and view the total number of HTTP errors
for that device
For more information, see Create a dashboard with dynamic sources.
- Interact with chart data
- A dashboard chart is a dynamic, interactive visualization of data. As you troubleshoot
or analyze data, you can interact with chart data in several ways, as shown in the figures
Note: Copy or create a chart, and then edit the chart in Metric Explorer. When you copy or create a chart from a system dashboard or shared dashboard that you do not own, you must save the edited chart to your own custom dashboard.
- Navigate to detections
- Some charts display detection markers, which indicate detections associated with the
source of the metric data during the time interval specified for the chart. Detection
markers only appear if you are licensed for the ExtraHop Machine Learning Service and have
Hover over the detection marker to view the name of the identified detection, and then click the detection marker to navigate to the detail page for the detection for further investigation.
For example, in the following figure, you can see a detection marker that indicates that a DNS Server Errors detection was identified at 8:00 AM on the source.
Note: If the time interval of the chart is less granular than the duration of the detection, then the start time and duration of the detection is rounded to match the data points on the chart. Note: Detections require a connection to the cloud-based ExtraHop Machine Learning Service.
Only the following chart types can display detection markers:
- Line & column
Detection markers are a user preference that you can enable or disable from the User menu. For more information, see Enable or disable detection markers.
When you first log into the Discover or Command appliance, you see the Activity dashboard. ExtraHop users have access to the Activity dashboard and the Network dashboard, which are known as system dashboards.
System dashboards give you different types of insights into the general behavior and health of your network:
- Activity dashboard
- Find top-talkers by application (L7) protocols and view recent alerts. For more information about charts in this dashboard, see Activity dashboard.
- Network dashboard
- Identify traffic latency and bottlenecks over the data link (L2), network (L3), and transport (L4) layers. For more information about charts in this dashboard, see Network dashboard.
If you see interesting data in a system dashboard chart, you can investigate further.
If you want to monitor specific metrics or custom metrics, you can create a custom dashboard. Custom dashboards are stored separately for each user that accesses the ExtraHop Discover appliance. After you build a custom dashboard, you can share it with other ExtraHop users.
- Create a custom dashboard from scratch
- Copy an existing dashboard, and then customize it
- Create a chart from a protocol page, and then save it to a new dashboard
Custom dashboards are located in the My Dashboard folder in the dashboard dock. To make changes to your dashboard at any time, click the command menu in the upper right corner of the page and select Edit Layout or Dashboard Properties.
To delete a dashboard, click the command menu in the upper right corner of the page, and then select Delete. Or edit the dashboard dock and select the trash icon next to the dashboard name and then click Delete Dashboard.
|Important:||You cannot recover a deleted dashboard. If a dashboard owner's account is deleted from the ExtraHop system, you have the option of transferring the dashboard to another user through the Admin UI. Otherwise, all custom dashboards associated with the user account are also deleted. To preserve dashboards, make a copy before the account is deleted.|
Dashboards that have been shared with you are located in the Dashboard Inbox folder in the dashboard dock. You can organize your shared and custom dashboards, interact with dashboard data, or print dashboard data.
|Note:||Only a dashboard owner can delete a dashboard.|
You can export dashboard data to a CSV, Excel, or PDF file. You can export and share data by individual chart or by the entire dashboard.
To export chart data, click the chart title and make a selection from the drop-down menu. To export or share the entire dashboard, click the command menu in the upper right corner of the page to access the following options: