Dashboards

The Dashboards area includes up to 15 default dashboards. Each dashboard includes a collection of visualizations (also known as panels) that provide insight into a particular area of interest, such as device usage, website usage, or the security status of devices.

All dashboards are filtered to show the data collected from your Active devices over a specified time range; Inactive and Disabled devices are excluded from all device counts.

A default time range is set in each dashboard, but you can select a different time range using Kibana's time range filter. The total amount of historical data that is available depends on your data retention period.

You can work with the dashboards in a number of ways, including:

  • Changing the time range of a dashboard

  • Searching for and filtering the data

  • Adding or removing panels

  • Creating dashboards

  • Exporting dashboards to a PDF or PNG file

For help working with Kibana dashboards, click in the elastic header and click Documentation below Dashboards.

IMPORTANT  Absolute encourages you to customize Absolute Insights to suit your needs, but instead of modifying the default dashboards, we recommend that you create a new dashboard and copy visualizations (panels) to it. This practice helps to ensure that your customizations are preserved if a default dashboard is updated in a new release of Absolute Insights.

Default dashboards

To help you get started, Absolute Insights includes up to 15 default dashboards.

NOTE  Depending on the configuration of your Absolute account, some dashboards may not be available.

To access the Dashboard area:

  1. Log in to the Absolute console as a user with Manage permissions for Insights.

  2. On the navigation bar, click to open Absolute Insights.

  3. Click and click Dashboard. Depending on the configuration of your Absolute account, one of the following dashboards opens:

    • Executive Summary
    • Application Usage

  4. To view a different dashboard:

    1. Click Dashboard.

    2. On the Dashboards page, click the dashboard that you want to open.

For help working with Kibana dashboards, click in the elastic header and click Documentation below Dashboards.

NOTE  If you require further assistance working with Absolute Insights, contact your Absolute representative or Absolute Technical Support. Please do not contact Elastic Support.

Each dashboard includes a Documents Matching Current Search data table that lists the individual data documents that were used to build the dashboard's visualizations. Any filters applied to the dashboard are also applied to the data table.

To view a dashboard's Documents Matching Current Search data table, scroll to the bottom of the dashboard.

To export a data table in CSV file format:

  1. Navigate to the dashboard that contains the data table that you want to export.
  2. In the Kibana toolbar, click and then scroll to the bottom of the dashboard.
  3. Click the data table's icon and click Edit search. The data table opens in the Discover area.
  4. In the Kibana toolbar, click Share > CSV Reports.
  5. Click Generate CSV. A Queued report for search dialog shows.
  6. To download the report:
    1. Click > Stack Management > Reporting.
    2. Click the report's icon. Depending on the number of documents included in the data table, it may take several minutes for the file to download.

NOTE   The system cannot download CSV files that exceed 25 MB. If your attempt to download a CSV file fails, filter the data table or shorten its time range before attempting to download the file again.

Summary dashboard

The Executive Summary dashboard includes visualizations that summarize the state of your devices during the specified time range, based on a number of factors. This dashboard shows by default when you first access Absolute Insights.

The default time range for this dashboard is 7 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

  • Devices are actively calling in to the Absolute Monitoring Center

  • The following policies are activated in at least one policy group:

  • The Report, Repair and Reinstall option is enabled in at least one Application Resilience policy

    NOTE  If the Report only option is enabled in all Application Resilience policies, some visualizations, such as Repair Success and Failure by Week, will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week visualizations, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

IT dashboards

The Application Health Status dashboard includes visualizations that provide insights into the status of your Windows devices' resilient applications by the Application Resilience policy during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

  • Devices are actively calling in to the Absolute Monitoring Center
  • The Application Resilience policy is activated in at least one policy group

  • The Report, Repair and Reinstall option is enabled in at least one Application Resilience policy

    NOTE  If the Report only option is enabled in all Application Resilience policies, some visualizations, such as Repair Success and Failure by Week, will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week visualization, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

The Application Total Runtime, CPU, and Memory Usage dashboard includes visualizations that allow you to analyze the impact of installed Windows and Mac applications on CPU and memory usage, during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

The dashboard contains data when the following prerequisites are met:

In the Usage Controls area of the dashboard, you can apply one or more of the following filters to quickly customize the data in all visualizations:

  • Device Name: select an individual device from the selection list

  • Application Name: select an individual application from the selection list

  • Device Group: select an individual device group from the selection list

  • OS Default Applications: select true to show only OS-default applications; select false to show only non OS-default applications

    NOTE  This filter applies to Windows applications only.

The following terms are used to describe this dashboard's visualizations:

  • In use: the application is running on the device. The user may or may not be interacting with the application.

  • OS-default application: an application (or application executable) that is included by default with the Windows operating system, such as Camera, Alarms & Clock, and Paint 3D.

  • Non OS-default application: an application (or application executable) that is not included by default with the Windows operating system

  • Application executable of interest: an executable that is included in either Microsoft (Office) 365 ( e.g. outlook.exe, excel.exe) or Adobe Creative Cloud 2015 (e.g. photoshop.exe, AcroRd32.exe)

  • Office hours: usage that occurs between 8 a.m. and 5 p.m., Monday to Friday

  • After office hours: usage that occurs between 5 p.m. and 8 a.m., Monday to Friday, or on a weekend

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week visualizations, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

The Application Usage dashboard includes visualizations that allow you to analyze the usage of applications installed on your Windows and Mac devices, during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

The Application Usage dashboard contains data when the following prerequisites are met:

In the Usage Controls area of the dashboard, you can apply one or more of the following filters to quickly customize the data in all visualizations:

  • Device Name: select an individual device from the selection list

  • Application Name: select an individual application from the selection list

  • Device Group: select an individual device group from the selection list

  • OS Default Applications: select true to show only OS-default applications; select false to show only non OS-default applications

    NOTE  This filter applies to Windows applications only.

The following terms are used to describe this dashboard's visualizations:

  • In use: the application is running on the device. The user may or may not be interacting with the application.

  • In focus: the application is running on the device and it has user focus (can accept user input). Note that the user may or may not be actively interacting with an application when it is in focus.

  • OS-default application: an application (or application executable) that is included by default with the Windows operating system, such as Camera, Alarms & Clock, and Paint 3D.

  • Non OS-default application: an application (or application executable) that is not included by default with the Windows operating system

  • Application executable of interest: an executable that is included in either Microsoft (Office) 365 ( e.g. outlook.exe, excel.exe) or Adobe Creative Cloud 2015 (e.g. photoshop.exe, AcroRd32.exe)

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week visualizations, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

The Device Inventory dashboard includes visualizations that allow you to analyze the status of devices based on a number of software and hardware factors, such as operating system, BIOS version, and attached peripherals.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisite is met:

  • Devices are actively calling in to the Absolute Monitoring Center

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week visualizations, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

The Device Login dashboard includes visualizations that summarize the login and unlock events that occurred on devices during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisite is met:

  • Devices are actively calling in to the Absolute Monitoring Center

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

The Device State Changes dashboard includes visualizations that summarize the events that occurred on devices during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisite is met:

  • Devices are actively calling in to the Absolute Monitoring Center

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

The Device Usage dashboard includes visualizations that provide insights into the usage of devices during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

  • Devices are actively calling in to the Absolute Monitoring Center
  • The Device Usage policy is activated in at least one policy group

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

The Software Application Inventory and Versions dashboard includes visualizations that provide insights into the current status of devices' applications based on data collected during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the By Week or Weekly visualizations, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

The Web Usage dashboard includes visualizations that provide insights into the websites visited by devices during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

  • Devices are actively calling in to the Absolute Monitoring Center
  • The Web Usage policy is activated in at least one policy group

    NOTE  Depending on the Absolute product licenses associated with your account, the Web Usage policy may not be available, in which case, this dashboard will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

NOTE  To view meaningful data in the Web Usage Trend Lines visualization, update the time range from Last 1 day to one of the multi-week options, such as Last 30 days.

Risk and Compliance dashboard

The Anti-Malware and Encryption Status dashboard includes visualizations that provide insights into the status of anti-malware and encryption applications on devices during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

Privacy and Data Risk dashboards

The Endpoint Data Discovery dashboard includes visualizations that provide insights into the at-risk file content detected by the Endpoint Data Discovery policy during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

NOTE  Depending on the Absolute product licenses associated with your account, the EDD policy may not be available, in which case, this dashboard will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

The Sensitive Files dashboard includes visualizations that provide insights into the at-risk files detected by the Endpoint Data Discovery policy during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

  • Devices are actively calling in to the Absolute Monitoring Center
  • The Endpoint Data Discovery (EDD) policy is activated in at least one policy group

    NOTE  Depending on the Absolute product licenses associated with your account, the EDD policy may not be available, in which case, this dashboard will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

Security, Risk, and Compliance dashboards

The Alerts dashboard includes visualizations that provide insights into the events that triggered rules during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

This dashboard contains data when the following prerequisites are met:

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.

The Security Posture dashboard includes visualizations that provide insights into the state of data and device security during the specified time range.

The default time range for this dashboard is 30 days, but you can select a different time range using Kibana's time range filter.

Visualizations on this dashboard contain data when the following prerequisites are met:

NOTE  Depending on the Absolute product licenses associated with your account, the EDD policy may not be available, in which case, some visualizations will not contain any data.

This dashboard contains a collection of default visualizations. To view a visualization's description, hover over its name or icon in the top left of the panel. For help filter or editing a visualization or changing its time range, click in the Elastic header and click Kibana documentation.