pane
The Widgets pane is used to view the master widgets that are associated with each filter. You can also use this pane to create dashboard widgets and to delete master widgets from the selected filter.
Add to Dashboard
This button adds a copy of the master widget that is currently shown in the Widgets pane to the dashboard.
Delete Widget
This button deletes the master widget that is currently shown in the Widgets pane. Deleting a master widget does not delete any of the dashboard widgets that came from that widget.
Widget Builder
This topic explains how to use the Widget Builder, which is used to add a new widget or edit the configuration of an existing widget.
The following table explains each field on the Widget Builder.
Field Description
Name Type a name for the widget. This name will appear in the widget’s title bar.
Filter Select the filter that is to be the widget's data source. If a filter name appears in italics, it means the filter is currently turned off. When creating a widget from the Monitor view, this field defaults to the filter that is currently active. If you select a different filter, the widget will be associated with that filter, not the active filter.
When creating a widget from the Ops Center, this field defaults to the first option in the list.
Chapter 6: Ops Center
Field Description
widget will not display any chart information until the filter is turned back on.
Description Type a brief description of the information this widget is reporting. You may use up to 80 characters.
Visual Configuration Visualization
Type
Select the type of chart or graph you want—Pie, Bar, Line, Table, etc. Select Table for those times when a table of values is a useful way to view the data. You can display a widget with any of these display types at any time. However, some display types may not make sense for some widgets, depending on the widget’s content.
Color/ Color Palette
Select a color palette for the chart or graph.
X-Axis Label If desired, type a label for the chart or graph’s horizontal axis. Y-Axis Label If desired, type a label for the chart or graph’s vertical axis.
Preview The Preview section shows what the widget will look like, based on the options you have selected in the Visual Configuration section.
Data Configuration
Field Select a data field you want reported from those that are available in the selected data source.
Show Select how you want the frequency reported:
l Count: (default) This option counts each occurrence of the
selected Field value. For example, if the Field you select is EventID, you are counting the number of events. As a practical matter, no matter which field you select, you are counting events. But it is best to think of the widget as counting occurrences of the field.
Field Description
l Distinct Count: This option does not count repeating Field
values. Instead, it counts each time a distinctly different event occurs. For example, if you select a Field value like Event Name or Detection IP, the widget will count each specific value only once.
When used in a single-dimension chart, the Distinct Count option reports all values as 1, so this option is best used with multi-dimensional charts.
Sort Select how you want the data Show data sorted:
l Descending (default) order is from highest to lowest (Z to
A, or 0 to 1, etc.).
l Ascending order is from lowest to highest (A to Z, or 1 to 0,
etc.).
Sorting only applies when your Versus value is something other than Time.
Versus If you want a second dimension in the chart, select another data field from those that are available in the selected data source. This field’s sort order is ascending.
Split By If you want a third dimension in the chart, select another data field from those that are available in the selected data source.
This field’s sort order is ascending.
Limit Most filters contain a data span that exceeds what is practical to chart. The Limit value limits the number of items that will be seen. Select a limit for the number of items that are to be charted. The default value is 5.
For example, this can represent your Top 5 or Bottom 5, depending on how you sort the data.
Scope Select a value for the scope. This is the time frame reported by the chart or graph. The scope is always measured backward from the moment the chart is refreshed. For example, a scope of 30
Chapter 6: Ops Center
Field Description
minutes means “the last 30 minutes.”
The scope can be measured in Seconds, Minutes (default), Hours, or Days. For events that happen frequently, choose a narrow scope. For events that happen rarely, choose a large scope.
Resolution Select the time value that defines the “tick marks” that are to be used on the chart’s horizontal X-axis. This field is required when Versus is a Time Field.
For example, if you are looking at 30 minutes of data, a
Resolution of 5 Minutes means the bars or line chart data points are drawn in 5 minute increments. In charts with wider scope, the resolution could be hours or even days.
This option is disabled for widgets that are not reporting time- based data.
Refresh Select the rate at which you want the widget to refresh its visual display. This is necessary because the Console is monitoring real-time data. Therefore, you need to periodically refresh the chart.
Save and cancel Save to
Dashboard
Select this option to save the new or updated widget to the bottom of the Ops Center dashboard.
Save Click Save to save the new or revised master widget.
Upon saving, the new widget configuration immediately appears in the Op CenterWidget Manager and in the Monitor view's Widget pane.
Cancel Click Cancel to cancel your changes close the Widget Builder. Widgets act as shortcuts to the event filters that are their data sources. This means you can open the source filter directly from a widget. You do this by clicking the specific line, bar, or pie wedge of chart that interests you. The
that correspond with the chart item selected. SeeOpening a filter from a widgetfor information on using widget filters.
The following table describes the function of each button on a widget toolbar. All of these buttons are on the widget toolbar, except for the “legend” button, which appears in the lower-left corner of the widget.
Button Function
Opens the widget in the Widget Builder, so you can edit its settings. “Flips” the widget, so you can configure its presentation format. Refreshes the widget’s data.
Expands (maximizes) the widget to fill the desktop.
Restores the widget from its maximized size to its default size. This button has two functions:
l In normal dashboard mode, this button deletes the widget from the
dashboard.
l When you are editing a “flipped” widget, this button closes the
widget’s edit mode, and returns it to its normal desktop view. Opens the widget’s legend.