ENGINSIGHT
WebsiteLoginKostenloser Testzugang
English
English
  • Overview
  • Features
  • Operation
    • Platform overview
    • Start Guide
    • Platform
      • Dashboard
        • Vulnerability Management
        • Operation Centers
        • My Dashboards
        • Configurations
      • Issues
      • Hosts (Pulsar Agent)
        • Pulsar Agent
        • Host details
        • Policy Manager
        • Software Inventory
        • Intrusion Detection System
        • File Integrity Monitoring
        • System events
        • Update Manager
        • Plugins
        • Machine Learning
      • Host (Pulsar-Agent) BETA
        • Pulsar Agent
        • Hostdetails
        • Softwareinventar
        • Plugins
        • Policies
        • Globale Tags
        • Tag Manager
        • System Events
        • Vulnerability Manager
        • Compliance
        • Intrusion Detection System
        • File Integrity Monitoring
        • Advanced Persistent Threats
      • Endpoints (Observer)
        • Endpoint details
        • Domains
        • Certificate Manager
        • Observer
      • Observations
      • Shield
      • Penetration Testing (Hacktor)
        • Run pentest
        • Audits
        • Audit Definitions
        • Target Groups
        • Auth-Providers
        • Hacktor
        • Custom Scripts
      • Discoveries
      • SIEM
        • Data Lake
        • Cockpits
        • Obfuscators
        • Workflows
        • Incidents
        • Extractors
        • Collectors
        • Loggernaut
        • Advanced Settings
        • Models
      • Alerts
      • Settings
      • Organisations
      • Tags
      • Searchbar
  • On-Premises
    • Requirements
    • Installation
      • Automatic Installation
      • Manual Installation
      • Load Balancing
      • SIEM
      • Deinstallation
    • Update
    • Configuration
      • HTTPS and Certificates
      • Licences and Organisations
      • Mail Server
      • 2-Factor Authentication
      • SSO via Office 365
      • Storage Times
      • White Label
      • NGINX Extractor
      • Field Level Encryption
      • Loggernaut-Configurations
  • Technical Details
    • System Requirements
      • Pulsar: Operating Systems
    • Current version numbers
    • Pentest Vectors
    • API
  • Partner section
    • Licenses and organizations
Powered by GitBook
On this page
  • Add Cockpit
  • Create views

Was this helpful?

  1. Operation
  2. Platform
  3. SIEM

Cockpits

PreviousData LakeNextObfuscators

Last updated 1 year ago

Was this helpful?

Who knows better which information is relevant for your own company than you? Under the menu item Cockpits you have the possibility to create your own dashboards. Customize the views to your needs and choose between numerous overview options the ones that suit you best. Each view in the cockpit is based on a predefined or self-created . It is also possible to build several different views based on a single stream.

Set a start and end time for viewing within the cockpit. By activating the "Autoreload" button you are sure to always stay up to date. Use the "Full Screen" button to quickly switch to full screen mode to hide distracting details and exit by pressing the escape key.

Via "Add widget" you can quickly create new views and under the "Edit" button you can also edit the name and description of the cockpit afterwards.

Add Cockpit

To create a new cockpit, click on "Add cockpit" in the upper right corner. In the pop-up window that appears, enter a concise name and a short description and confirm your entries with "Add cockpit".

Create views

Please refer to the following tabs for the setup of the respective display formats:

Determine which information should be displayed on the left x-axis and on the right y-axis. For this purpose, assign a field to the respective axis under "Field name". Define the desired "unit" (Numeric, Bytes, Kilobytes, Megabytes, Miliseconds, Seconds, Minutes) and change the color of the display if necessary. Repeat this for both axes. You can also assign several fields to each axis using the "ADD FIELD" button. If you do not define any fields, the total number of all events of this stream will be displayed automatically!

Corresponds to the setup under "Line".

Assign a specific field from the assigned stream to the plot and thus display the 20 most common results within the chart.

Select the "Country" option under "Scale". Now specify a suitable geoip field from your specified stream under "Location Source".

Customize the size of the added widget by dragging the bottom right corner. The buttons in the upper right corner allow you to change the position of the widget, change the selected display or delete the widget from the cockpit.

event stream