FortiSIEM Customizing Dashboards

Customizing Dashboards

FortiSIEM includes several dashboards for device types and IT functional areas, but you can also customize and create new dashboards and widgets.

Adding Custom Columns to Dashboards

Adding Widgets to Dashboards

Creating a Customized Dashboard Setting a Dashboard to Home

Adding Custom Columns to Dashboards

You may want to add custom columns based on event attributes to a Summary dashboard. This topic explains how to create a custom set of columns using the example of a hardware temperature readout, and then add them to a dashboard.

Prerequisites

Procedure

Prerequisites

Read the topic How Values in Dashboard Columns are Derived

Procedure

  1. Find the event that contains the attribute you want to use.

In this case, you want to create a hardware temperature reading. The event PH_DEV_MON_HW_TEMP contains the attribute envTempDeg C.

  1. Go to Admin > Device Support > Dashboard Columns.
  2. Click New.
  3. For Name, enter the display name for the new metric you want to collect. For this example, enter the name Temperature Reading.
  4. For Event Type, click the Edit icon and select the event you want to use.

For this example, select PH_DEV_MON_HW_TEMP.

  1. Click the + icon to add a column. As you complete each column, click OK, then click + to add more columns.

For each event type, you will typically create three columns: a Host column that contains IP information for associated hosts, an Object c olumn that includes information about the object being reported on, and a Reading column that contains the metric you want to report on.

Note that you could create additional Reading columns for other attributes contained in your event.

Column Type Example Settings
Host Attributes: hostIpAddr

Aggregator: N/A

Display Name: N/A

Format: N/A

Trend Chart: N/A

Type: Host

Object Attributes: hwComponentName

Aggregator: N/A

Display Name: N/A

Format: N/A

Trend Chart: N/A

Type: Object

Reading Attributes: envTempDegC

Aggregator: AVG|MAX

Display Name: Temp

Format: DegreeC

Trend Chart: Health

Type: Reading

  1. When you’re finished adding columns, click OK.

The new column you created will appear in the Admin > Device Support > Dashboard Columns.

  1. Select your new column in the list, and then click Apply.
  2. To add your column to a dashboard, navigate to the dashboard.
  3. In the dashboard, click Select Columns.
  4. Under Event Types, select the event type you used to create the new column.

The columns associated with that event type will be listed under Columns, and the Attribute Name will list the attribute you used to

create the column.

  1. Under Columns, select your column and use the >> button to move it into the Selected Columns.
  2. Use the up and down position buttons to place the column in the order where you want it to appear in the dashboard.
  3. Click OK.

Your new column will appear in the dashboard.

This entry was posted in Administration Guides, FortiSIEM on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.