Dashboards

Dashboards are an effective tool for monitoring high-priority network traffic or troubleshooting an issue. You can monitor general information about your network from built-in system dashboards, or build a custom dashboard to create a personalized view of metrics that are important to you.

A dashboard is an HTML page that displays real-time and historic metric data. Dashboards consolidate multiple metrics into a central location where you can investigate and share data. In this guide, you will learn about dashboard features and find links to dashboard resources and procedures.

Here are some definitions you should know about dashboards in the ExtraHop system:

Dashboard dock
The left pane of the dashboard page, which provides access to all of your dashboards and dashboard collections.
Region
A compartment within the dashboard layout that contains widgets.
Widget
A configurable component for displaying metric data and information. Charts are the most common widget found in dashboards.
Time Selector
A tool that changes the time interval for the entire dashboard. You can also change the time interval for a specific region within the dashboard.

Interact with dashboard data

A dashboard is a launching point into data analysis and troubleshooting. When you observe a metric value that raises questions, a dashboard provides the following options for interacting with metric data and finding answers.

Change the time interval
Observe how data changes over time in the following ways:
Change the dashboard source
If you are viewing a dashboard with dynamic sources, you can change the source of the information you are viewing. For example, you could create a dashboard that shows you the total number of HTTP errors for a device. Then, you could switch the source for the dashboard to any device on your ExtraHop system and view the total number of HTTP errors for that device

For more information, see Create a dashboard with dynamic sources.

Interact with chart data
A dashboard chart is a dynamic, interactive visualization of data. As you troubleshoot or analyze data, you can interact with chart data in several ways, as shown in the figures below.

Note:Copy or create a chart, and then edit the chart in Metric Explorer. When you copy or create a chart from a system dashboard or shared dashboard that you do not own, you must save the edited chart to your own custom dashboard.
Navigate to detections
Some charts display detection markers, which indicate detections associated with the source of the metric data during the time interval specified for the chart.
Note:Machine learning detections require a connection to ExtraHop Cloud Services.

Hover over the detection marker to view the name of the identified detection, and then click the detection marker to navigate to the detail page for the detection for further investigation.

If multiple detections occur at approximately the same time, the marker displays the number of detections. Click the marker to display the list of detections, and then click a detection title to navigate to the detail page.

Note:If the time interval of the chart is less granular than the duration of the detection, then the start time and duration of the detection is rounded to match the data points on the chart.

Only the following chart types can display detection markers:

  • Area
  • Line
  • Column
  • Line & column

Detection markers are a user preference that you can enable or disable from the User menu. For more information, see Enable or disable detection markers.

Monitor your network with system dashboards

The ExtraHop system provides the following built-in dashboards that display common protocol activity about the general behavior and health of your network.

Activity dashboard
Find top-talkers by application (L7) protocols and view recent alerts. For more information about charts in this dashboard, see Activity dashboard.
Network dashboard
Identify traffic latency and bottlenecks over the data link (L2), network (L3), and transport (L4) layers. For more information about charts in this dashboard, see Network dashboard.
Security dashboard (Reveal(x) only)
Monitor general information about potential security threats on your network. For more information about charts in this dashboard, see Security dashboard.

System dashboards are located in the default System Dashboards collection in the dashboard dock and cannot be added to another collection. System dashboards can be viewed by any user except for restricted users.

Monitor your network with custom or shared dashboards

If you want to monitor specific metrics or custom metrics, you can create a custom dashboard. Custom dashboards are stored separately for each user that accesses the ExtraHop Discover appliance. After you build a custom dashboard, you can share it with other ExtraHop users.

Working with custom dashboards

There are three ways to create your own dashboard: New dashboards are opened in Edit Layout mode, which enables you to add, arrange, and delete components within the dashboard. After creating a dashboard, you can complete the following tasks:

Custom dashboards are located in the Dashboard view of the dashboard dock, or if they are part of a dashboard collection, in the Collections view. To make changes to your dashboard at any time, click the command menu in the upper right corner of the page and select Edit Layout or Dashboard Properties.

To delete a dashboard, click the command menu in the upper right corner of the page, and then select Delete.

Important:You cannot recover a deleted dashboard. If a dashboard owner's account is deleted from the ExtraHop system, you have the option of transferring the dashboard to another user through the Admin UI. Otherwise, all custom dashboards associated with the user account are also deleted. To preserve dashboards, make a copy before the account is deleted.

Working with shared dashboards

Dashboards and collections are located in the dashboard dock.

Click Collections to display all of the dashboard collections you own or that have been shared with you. The number of dashboards in each collection is displayed. Click the collection name to view the owner, who the collection is shared with, and the list of dashboards in the collection.

Only the collection owner can modify or delete a collection. However, because dashboards can be added to multiple collections, you can create a collection and share it with other users and groups.

Click Dashboards to display an alphabetized list of all of the dashboards that you own or that have been shared with you, including dashboards shared through a collection. The owner of each dashboard is displayed. An icon next to the owner name indicates that the dashboard was shared with you.

You can only modify a dashboard that you do not own if the owner grants you edit permission. However, you can make a copy of a shared dashboard and then customize it.

Tip:To search for a specific collection or dashboard, type the name in the filter at the top of the dashboard dock and then click either Collections or Dashboards to view the results.

Export and share dashboard data

You can export dashboard data to a CSV, Excel, or PDF file. You can export and share data by individual chart or by the entire dashboard.

To export chart data, click the chart title and make a selection from the drop-down menu. To export or share the entire dashboard, click the command menu in the upper right corner of the page to access the following options:

Check out the following resources that are designed to familiarize new users with building dashboards.

Published 2020-07-07 15:55