You can use widgets to monitor program operation.
The layout is the appearance of the workspace of the program web interface window in the Dashboard section. You can add, delete, and move widgets on the layout, and configure the scale of widgets.
If you are using the distributed solution and multitenancy mode, the section displays data on the organization that you chose.
By default, this section displays information only on alerts that were not processed by users. To also display information on processed alerts, turn on the Processed switch in the upper-right corner of the window.
The Dashboard section displays the following widgets:
The left part of each widget displays attack vectors, alert importance levels, alert states, and technologies that generated the alerts. The right part of each widget displays the number of times that the program detected them during the selected period of data display on widgets.
To go to the Alerts section of the program web interface and view related alerts, click the link with the name of the attack vector, alert importance level, and technology that generated the alert. Alerts will be filtered based on the selected element.
The left part of each widget lists the domains, addresses of recipients, IP addresses, and addresses of message senders, host names, and TAA (IOA) rule names. The right part of each widget displays the number of times that the program detected them during the selected period of data display on widgets.
By clicking the link with the name of each domain, recipient address, IP address, message sender address, host name, and TAA (IOA) rule name, you can go to the Alerts section of the program web interface and view related alerts. Alerts will be filtered based on the selected element.