There are 2 types of dashboards on Logsign web interface. Static and dynamic ones. The static dashboards are automatically created after the installation, and contain the results of the integrated sources. The dynamic dashboards are the customized ones to create for monitoring all the events that you want. You can follow the steps below to create your individual dashboards.
1- You need to click on Add Custom Dashboard button to create one. Then you need to give a name to your dashboard.
NOTE: In the Profiles field, we can select the type of dashboard profiles that we previously created at Settings > Delegation > Dashboard Profiles. By adding the profiles, the only users that have these dashboard profiles will be able to see this dashboard results. This is not a required field.
2 - After we created the dashboard, we need to add a widget. Click on the Add Widget button as below, and then select a widget type that you want. We have 20 types of widgets, you can preview all the types by scroll down. In this example, we select the Grouped Data With Pie Chart type.
3- In Content Settings tab, the required fields must be filled.
- Title: The name of the widget.
- Information Source: This contains the log results according to the source that we selected. Here, as we'll create the widget with the logs of a registered source in device list, we'll select this field as Reports. You can select Captive Portal to get the results of hotspot events, Alerts to get alert events, and Logsign Events to get Logsign web interface events. The column names will be changed according to the index type.
- Time Column: This is already specified as Time.Generated. This is one of time attributes that log will be shown up on Logsign interface.
- Grouped Column: The Dashboard structure will be configured by this column in the widget. In this example, we'll select this as Source.IP as we want to see the all the IP addresses of the sources.
- Grouped Column Order Type: You can order the results by the event counts. The results also can be ordered by the column results. You can order these results by ascending or descending counts by clicking on reverse ones.
- Refresh Time: This is the time interval that the widget refreshes results by being added of the new logs.
- Query: It's the most important field as you need to type a query to create a dashboard, alert and reports. So you can follow this link to see how to create a query in Logsign. In dashboard widgets, you can get the query from a report that is created before. Here we'll select it as * to see all the event results of all the sources.
- Rows Per Page: This is the count of column results in the widget.
- Index Time: This is the time interval of the log results that the widget will contain. For example, if you select it as 2 Hours, the widget will show you the results of last 2 hours.
After you completed the content settings, you can hit Next button.
4- In the View Settings, you can select and customize the widget size, and also 1st and 2nd column sizes. Also you can see a preview of it below the window. After you choose these sizes, you can click on Save button to finalize the creation of the widget.
5- Here's the output of the widget that we just created. You can adjust the size of the widget and replace it by clicking and dragging it in the dashboard area. You can add a new widget into the same dashboard by clicking on Add Widget again.