Fortinet white logo
Fortinet white logo

FortiDLP Console User Guide

Viewing the Dashboard

Viewing the Dashboard

To view the Dashboard module, follow these steps.

How to view the Dashboard module
  1. In the FortiDLP Console, on the left-hand sidebar, click .
    By default, data displays for the last 24 hours.
  2. To change the time frame, select from the menu on the top-right corner of the page. The following options will be available based on your tenant's data retention settings:
    • Last week
    • Last two weeks
    • Last month
    • Last three months.
  3. Optionally, do the following:
    • To edit a widget:
      1. Click> Edit widget.
      2. To edit a widget's name, in the Name field, type a new name.
      3. To edit a top users or top nodes widget's plot type, in the Plot type menu, select either Top risky users or Top risky nodes.
      4. To edit a detection trend widget's data source:
        • Select/deselect the Show average checkbox to show/hide the average number of detections during the current time frame. This also shows/hides the average number of violations during the previous time frame if Compare previous is selected.
        • Select/deselect the Compare previous checkbox to show/hide when detections occurred during the previous time frame.
      5. To edit a widget's filters, in the Filters field, type the detection search properties you want to add, separating each filter by a space and an AND or OR operator. You can use any alias or any detections property that is listed in the Investigate module's search menu. For more information, see Investigate search properties.
      6. Example

        For example, to filter by detections that have the #cyberhygiene tag and are associated with Chrome, type
        tags=cyberhygiene AND process_binary_name=chrome.exe.

      7. To edit a widget's tags, type the tags you want to add, separating each tag by a comma and a space. You can use any policy detection tag (default or custom).
      8. Click Save.
    • To reset a widget to its default state, click> Reset to default.
    • To export a widget to a PNG file, click> Export to PNG.
Tooltip

You can click on the top-right corner of a widget to go to the Detection event stream in the Investigate module, where all of that widget's filters will be applied.

Viewing the Dashboard

Viewing the Dashboard

To view the Dashboard module, follow these steps.

How to view the Dashboard module
  1. In the FortiDLP Console, on the left-hand sidebar, click .
    By default, data displays for the last 24 hours.
  2. To change the time frame, select from the menu on the top-right corner of the page. The following options will be available based on your tenant's data retention settings:
    • Last week
    • Last two weeks
    • Last month
    • Last three months.
  3. Optionally, do the following:
    • To edit a widget:
      1. Click> Edit widget.
      2. To edit a widget's name, in the Name field, type a new name.
      3. To edit a top users or top nodes widget's plot type, in the Plot type menu, select either Top risky users or Top risky nodes.
      4. To edit a detection trend widget's data source:
        • Select/deselect the Show average checkbox to show/hide the average number of detections during the current time frame. This also shows/hides the average number of violations during the previous time frame if Compare previous is selected.
        • Select/deselect the Compare previous checkbox to show/hide when detections occurred during the previous time frame.
      5. To edit a widget's filters, in the Filters field, type the detection search properties you want to add, separating each filter by a space and an AND or OR operator. You can use any alias or any detections property that is listed in the Investigate module's search menu. For more information, see Investigate search properties.
      6. Example

        For example, to filter by detections that have the #cyberhygiene tag and are associated with Chrome, type
        tags=cyberhygiene AND process_binary_name=chrome.exe.

      7. To edit a widget's tags, type the tags you want to add, separating each tag by a comma and a space. You can use any policy detection tag (default or custom).
      8. Click Save.
    • To reset a widget to its default state, click> Reset to default.
    • To export a widget to a PNG file, click> Export to PNG.
Tooltip

You can click on the top-right corner of a widget to go to the Detection event stream in the Investigate module, where all of that widget's filters will be applied.