Create a custom dashboard
In addition to the dashboards built in to Splunk UBA, you can create custom dashboards with panels specific to your data and network.
- Select Analytics > Custom Dashboards.
- Click New Dashboard to add a name to your custom dashboard.
For example, Network device threats. - Click New Widget to add a dashboard panel.
- Enter a Widget Name.
For example, Threats Count. - Select a Widget Measure.
For example, Threats Count to see a count of threats. - Click Next.
- Select a widget grouping.
For example, Device Types. - Click Next.
- Select appropriate filters.
For example, select Threat Categories and External to see only external threats. - Check to see how many threats match the filters you select to make sure your widget displays data.
- Click Next.
- Select a visualization.
For example, select a Bar Chart because it shows a helpful breakdown of threats by device type. The types of charts available for you to select depends on the data type. - Click OK to save your new panel.
Modify a dashboard widget
After you create a dashboard widget, you can modify it.
- Hover over the chart and gear () icon in the upper right corner of the panel.
- Click the pencil icon to Edit Widget.
- Navigate through the widget screen to make the desired changes.
- Click OK when you are done to save your changes.
Modify a custom dashboard
You can also modify dashboards.
- Click New Dashboard to create a new custom dashboard.
- Select Actions > Delete Dashboard to remove a custom dashboard.
- Select Actions > Rename Dashboard to rename the dashboard.
Customize your table view in Splunk UBA | Investigate Splunk UBA entities using watchlists |
This documentation applies to the following versions of Splunk® User Behavior Analytics: 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.4.1, 5.0.5, 5.0.5.1
Feedback submitted, thanks!