Cisco Cisco Firepower Management Center 4000
3-14
FireSIGHT System User Guide
Chapter 3 Using Dashboards
Understanding the Predefined Widgets
From Custom Analysis widgets, you can invoke event views (that is, workflows) that provide detailed
information about the events displayed in the widget. To do so, click the event for which you want more
information.
information about the events displayed in the widget. To do so, click the event for which you want more
information.
You can also right-click any IP address in the custom analysis widget to display a context menu that
allows you to obtain more information on the associated host, as well as add it to the global blacklist or
whitelist for Security Intelligence filtering.
allows you to obtain more information on the associated host, as well as add it to the global blacklist or
whitelist for Security Intelligence filtering.
Note
Depending on how you configure them, Custom Analysis widgets may place a drain on an appliance’s
resources; a red-shaded Custom Analysis widget indicates that its use is harming system performance.
If the widget continues to stay red over time, you should remove the widget.
resources; a red-shaded Custom Analysis widget indicates that its use is harming system performance.
If the widget continues to stay red over time, you should remove the widget.
For more information, see the following sections:
•
•
•
•
Configuring the Custom Analysis Widget
License:
Any
Like all widgets, the Custom Analysis widget has preferences that determine its behavior. To configure
a Custom Analysis widget, show the preferences as described in
a Custom Analysis widget, show the preferences as described in
.
A different set of preferences appears depending on whether you configure the widget to show relative
occurrences of events (that is, a bar graph), or configure the widget to show a graph over time (that is, a
line graph).
occurrences of events (that is, a bar graph), or configure the widget to show a graph over time (that is, a
line graph).
To configure the widget to show a bar graph, select any value except
Time
from the
Field
drop-down list.
To configure the widget to show a line graph, select
Time
from the
Field
drop-down list.
The following table describes the various preferences you can set in the Custom Analysis widget.
Table 3-4
Custom Analysis Widget Preferences
Use this
preference...
preference...
To control...
Title
the title of the widget.
If you do not specify a title, the appliance uses the configured event type as the
widget title.
widget title.
Preset
the preset for the widget.
The Custom Analysis widget is delivered with numerous presets, which are
widget configurations predefined by Cisco. The presets serve as examples and can
provide quick access to information about your deployment. You can use these
presets or you can create a custom configuration.
widget configurations predefined by Cisco. The presets serve as examples and can
provide quick access to information about your deployment. You can use these
presets or you can create a custom configuration.
For a detailed list of presets, see the
table.
Table
the table of events which contains the event data the widget displays.