About Absolute Insights for Endpoints

Absolute Insights for Endpoints (hereafter referred to as Absolute Insights or Insights) uses the power of Elasticsearch and Kibana to help you analyze your Absolute data using customizable dashboards and visualizations. To help you get started, Insights includes an extensive set of default dashboards. These dashboards include preconfigured visualizations, such as graphs, charts, and data tables, to help you track the device data that you're most interested in.

If you have data mining experience, Kibana makes it easy to build your own custom visualizations based on the 300+ Absolute data fields available to you. You can then add your visualizations to a new dashboard that you've created.

Absolute Insights is available as an add-on to all Absolute product licenses. For information about purchasing an Absolute Insights add-on license, contact Absolute Sales.

Before you get started in Insights, note the following requirements:

Requirement

Details

Browser support

Kibana supports the following web browsers, which are also supported by the Secure Endpoint Console:

  • The current version of:

    • Microsoft Edge (Windows 10 only)
    • Google Chrome
  • The current or immediately preceding version of Safari (Mac only)

Agent status

To view up-to-date data in Insights, the following requirements must be met:

  • The devices' Secure Endpoint Agent is actively calling in to the Absolute Monitoring Center

  • The applicable data collection policy is activated in the devices' Secure Endpoint Agent

    For example, to view data about the usage of the devices, the Device Usage policy must be activated. For more information about specific prerequisites to view data on each dashboard, see Default dashboards.

To access Insights and make changes to the dashboards and visualizations, your user role must be granted Manage permissions for Insights. The System Administrator role is granted this permission.

To access Insights and view the existing dashboards and visualizations, your user role must be granted View permissions for Insights. None of the default roles are granted View permissions for Insights. For view only access, you must create a custom role.

Depending on the Absolute Insights add-on license you purchased, you can view up to 365 days of historical data in Insights. For example, if you purchased Absolute Insights 90, 90 days of historical data is available.

Note that the initial data import includes a maximum of 30 days of historical data, regardless of the data retention period of your Absolute Insights add-on license.

As new data becomes available in the Secure Endpoint Console, it may take up to 2 hours for it to be available in Insights.