Dashboards

After the ARB package is imported to ArcSight, the following dashboards become available:

The dashboards display data collected during the last 48 hours.

You can enable a disabled dashboard by clicking the Enable Data Monitor split button () and selecting Enable Data Monitor in the drop-down list.

Enable Data Monitor button

Enabling a dashboard in versions 6.8 and 6.11

The instructions above are relevant for ArcSight ESM versions 6.8 and 6.11. To start using a dashboard in ArcSight ESM version 7.0, select Dashboards and then the  Data Monitors tab. In the console tree, select Data MonitorsSharedAll Data MonitorsPublic.

using_data_monitor_in_ArcSight7

Enabling a dashboard in ArcSight ESM version 7.0

Right-click Kaspersky CyberTrace Connector and select Edit Data Monitor. On the Attributes tab, specify 300 as the Bucket size in Seconds setting and 288 as the Number of Buckets setting.

Editing connectors

Editing Data Monitor

After performing these actions, data for the last 24 hours will be displayed in the dashboard. Follow the same steps for all monitors except CyberTrace Detection map.

Page top