Dashboards
The FortiInsight dashboards provide an overview of the activity happening across your organization's environment over various time ranges.These dashboards are accessed through the Dashboards drop-down menu. There are five dashboards: one configurable Custom dashboard and four built-in dashboards (Forensic Activity, Alerts, Data Flow, and Applications).
Each dashboard contains a variety of widgets that provide information about events, users, and alerts. Click on the arrow icon 
on the widget headings to go to the linked page containg more detailed information relevant to the widget. Click on the bars within bar chart widgets to drill down to see more in-depth data.
You can configure these widgets or build custom widgets to display the desired metrics. See Custom dashboard configuration.
Forensic Activity dashboard
The Forensic Activity dashboard provides an overview of all activity recorded by FortiInsight, including the following:
-
Top 10 endpoints, users, applications, files, folders, and activities
-
Lists of the most common applications and users
The following image shows an example of the Forensic Activity dashboard:
Alerts dashboard
The Alerts dashboard provides an overview of all alerts that have been triggered by policy breaches, including the following:
-
The number of users who have breached policies.
-
The number of policies that were breached.
- The number of critical policies that were breached (policies with a severity level of 60 and above).
-
A breakdown of the number of alerts generated by each policy, or associated with specific tags.
The following image shows an example of the Alerts dashboard:
Data Flow dashboard
The Data Flow dashboard gives an overview of the following:
-
The amount of data that has been transferred into and out of your organization's network, including the users responsible and the countries involved.
-
A breakdown of the most common file extensions. This information gives you an idea of what types of data are being transferred.
-
A daily breakdown of data transfer.
The following image shows an example of the Data Flow dashboard:
Applications dashboard
The Applications dashboard provides an overview of the key categories of applications that have been seen in your network
The following image shows an example of the Applications dashboard:
Custom dashboard configuration
The Custom dashboard consists of configurable widgets that you can build and modify to display the summary data you desire. You can add, remove, resize, and move around the widgets to create your own custom dashboard display.
The following image shows some examples of widgets:
Widget types
To create a new widget, click Add, name the widget, and select the type, data source, and field.
The following widget types are available:
|
Widget Type |
Description |
|---|---|
|
Top 10 Values |
Creates a bar chart. |
|
Series over time |
Creates a line graph. |
|
Count of Unique Values |
Metric type |
|
Top 100 Pie |
Creates a pie chart. |
The following image shows an example of the new widget window:
Filtering widgets
To further refine the data that is displayed in the widgets, use the Add Search Filter option. The filter option works in the same way as the search bar.
Widget example
The following image shows an example of the number of users who triggered alerts. Using filters to search for alerts with the GDPR compliance framework, we can see that six users triggered GDPR-related alerts.
