Create a custom dashboard

In addition to the dashboards built in to Splunk UBA, you can create custom dashboards with panels specific to your data and network.

1. Select Analytics > Custom Dashboards.
2. Click New Dashboard to add a name to your custom dashboard.
   For example, Network device threats.
3. Click New Widget to add a dashboard panel.
4. Enter a Widget Name.
   For example, Threats Count.
5. Select a Widget Measure.
   For example, Threats Count to see a count of threats.
6. Click Next.
7. Select a widget grouping.
   For example, Device Types.
8. Click Next.
9. Select appropriate filters.
   For example, select Threat Categories and External to see only external threats.
10. Check to see how many threats match the filters you select to make sure your widget displays data.
11. Click Next.
12. Select a visualization.
    For example, select a Bar Chart because it shows a helpful breakdown of threats by device type. The types of charts available for you to select depends on the data type.
13. Click OK to save your new panel.
    

Modify a dashboard widget

After you create a dashboard widget, you can modify it.

1. Hover over the chart and gear () icon in the upper right corner of the panel.
2. Click the pencil icon to Edit Widget.
3. Navigate through the widget screen to make the desired changes.
4. Click OK when you are done to save your changes.

Modify a custom dashboard

You can also modify dashboards.

• Click New Dashboard to create a new custom dashboard.
• Select Actions > Delete Dashboard to remove a custom dashboard.
• Select Actions > Rename Dashboard to rename the dashboard.