To help you get started, the Dashboard provides out-of-the-box dashboards with associated widgets. You will need to configure the widgets to ensure the dashboards display data appropriately for your environment.
Initially, the out-of-the-box dashboards are available to the administrative user created during the initial log in. This user can share these dashboards with SOC team members, who can then create their own clones. Alternatively, administrators can create one or more clones based on these dashboards, then share the clones, and set default dashboards for roles.
The out-of-the-box dashboard, How is my SOC running?, gives you an overview of the status and trends related to ESM case management. It includes the following widgets:
The out-of-the-box dashboard, Entity Priority, combines content from both Interset and ESM to provide the status of users and entities at risk, including risk scores calculated by Interset. It includes the following widgets:
The out-of-the-box dashboard, Health and Performance Monitoring, provides information about the status of the database installed with some components, such as ArcSight Recon and Interset. It includes the following widgets: