Cisco Cisco Firepower Management Center 4000

The down arrow icon (

) indicates that the event has moved down in the standings since the last 

time the widget updated. A number indicating how many places the event has moved down appears 
next to the icon.

The widget displays the last time it updated, based on the local time of the appliance. The widget updates 
with a frequency that depends on the dashboard time range. For example, if you set the dashboard time 
range to an hour, the widget updates every five minutes. On the other hand, if you set the dashboard time 
range to a year, the widget updates once a week. To determine when the dashboard will update next, 
hover your pointer over the 

 notice in the bottom left corner of the widget.

If you constrain a Custom Analysis widget using a saved search, then edit the search, the widget does 
not reflect your changes until the next time it updates.

If you want information on events or other collected data over time, you can configure the Custom 
Analysis widget to display a line graph, such as one that displays the total number of intrusion events 
generated in your deployment over time. For graphs over time, you can choose the time zone that the 
widget uses as well as the color of the line.

Finally, you can choose a custom title for the widget.