Main Page

1. Actions box
   • Select All: Select all the dashboards in the table.
   • Multiple Editing: It will open a dialog that allows the multiple editing of selected dashboards.
   • Remove: It will open a dialog that allow the tags removal.
2. Filter box
   • Input field: It is used to filter the entire table. The filter value is compared with all the cells.
   • Pin Icon: The icon is used to pin the filter after an hypotetical reload.
3. Table Actions box:
   • Plus icon: It opens a dialog that allow the “Dashboard Added”
   • .CSV: Downloads the table in CSV format.
   • .XLS: Downloads the table in XLS format.
4. Edit icon: It will open a container that allow the Dashboard Editing

New Dashboard

1. Name: It is the name of the dashboard
2. Description: It is the description of the dashboard
3. Timeout: It is a parameter used to specify the interval at which the dashboard data will be updated.
4. This section is used to associate the dashboard with the selected tags. You can click on the line to select the tags.
5. This section is used to associate the dashboard with one or more users. You can click on the line to select the users.
   • Share: The dashboard will be available for the selected users.
   • Copy: The selected users will have their own dashboard

Edit Dashboard

1. Name: It is the name of the dashboard
2. Description: It is the description of the dashboard
3. Owner: It is the dashboard creator. It is not editable.
4. Timeout: It is a parameter used to specify the interval at which the dashboard data will be updated.
5. This section is used to associate the dashboard with the selected tags. You can click on the line to select the tags.
6. This section is used to associate the dashboard with one or more users. You can click on the line to select the users.
   • Share: The dashboard will be available for the selected users.
   • Copy: The selected users will have their own dashboard
7. Shared icon: This indicates that the dashboard is shared with emphasized users.

Multiple Editing

1. Description: It is the description of the dashboard
2. Timeout: It is a parameter used to specify the interval at which the dashboard data will be updated.
3. Used For: this field reminds how many selected dashboards are associated to the element (in this case, tag)
4. This line displays the Remove icon, so you can delete all the associations with the tag.
5. This line does not display the Remove icon, so you can add the association dashboard-tag
6. This section is used to associate the dashboard with one or more users. You can click on the line to select the users.
   • Share: The dashboard will be available for the selected users.
   • Copy: The selected users will have their own dashboard

Delete Dashboards

Create a Dashboard

Dashboards are used to display important items to the administrator as soon as you have logged in to SGBox. They can be configured differently so that each user puts information on his dashboard that is relevant to him/her.

To create a new dashboard, connect to the web interface of SGBox.
SGBox > SCM > Dashboard

If you see the message “No dashboard opened yet” means that have not yet been created dashboard.
Click on the Dashboard button at the center of the page.

Click on the “+” button to create a new dashboard

Give a name to your dashboard, and click on it to open it.

Once open you will see the name of the dashboard. In our case: “Dashboard 1”
The dashboard right now is empty but you can compose with numerous Widgets.

Manage Dashboards and Tags

You can massively edit dashboard and tags to better manage this type of visualization and assign them to specific users or identify it with tags.

Requirements:

• SGBox version 5.3.1

From SGBox menu, go to SCM > Manage Dashboards.

You can filter the dashboard by the Name, Description, Users and Tags. Click on NEW TAG to create a new tag.

You can choose the Name, a color and on which dashboards the tag is inserted.

You can delete a tag by selecting the tag and click on DELETE TAG

If you haven’t assign the tag to any dashboards you can edit the dashboard and re-assign the tag.

You can also edit a specific tag by selecting it in order to change its properties.

This view allows you to edit, clone or delete a dashboard.

When you edit a dashboard you have two options: Share and Copy the dashboard.

• SHARE: dashboard is shared between the users. Changes will impact all the users involved.
• COPY: dashboard are copied on all users. Changes will impact just the user that edit the dashboard.

Delete a Dashboard

This article explain how to delete a dashboard. To do that: connect to the web interface of SGBox:
SGBox > SCM > Dashboad

Click on the Dashboard to the center of the page and select the dashboard that you want to delete.

Click the trash button in the dashboard that you want to delete.

Confirm the operation by clicking the OK button.

The ETL function allows user to search for a specific parameter in the events history. Using this functionality you can search in the past events any occurrence of the parameter you select. In this way it is possible, for example, to check if the source IP address of a potential attack was contacted by the internal network.

Requirements:

• SGBox version 5.0.4 is required.

Add a new widget to a new or existing dashboard. We use “Pattern Aanalysis” but you can use also “Multiclass Analysis”

Select a class and an event (in this example “[Snort] Standard message”, but any other event will fit the example)

Now select “Events detail Widget” and click “OK” to view the results.

If you see something strange or interesting you can start a new search. In our example the SourceIP of this possible attack would be a good starting point.

Right click on the value you want to search and you will see a popup “Search this value as…”.

Click on the popup, it will open a menu where you’ll be able to select up to 20 different parameters at the same time. The value you have clicked will be searched on ALL events as the selected parameters.

The dashboard will popup to show you all the events that has the selected value as one of the parameters you’ve selected.

You can now filter the events by clicking on an item in the dashboard and also save this view as a new dashboard. You will find this dashboard in your dashboard list.

This article explain how to delete a dashboard. To do that: connect to the web interface of SGBox:
SGBox > SCM > Dashboad

Click on the Dashboard to the center of the page and select the dashboard that you want to delete.

Click the trash button in the dashboard that you want to delete.

Confirm the operation by clicking the OK button.

Dashboards are used to display important items to the administrator as soon as you have logged in to SGBox. They can be configured differently so that each user puts information on his dashboard that is relevant to him/her.

To create a new dashboard, connect to the web interface of SGBox.
SGBox > SCM > Dashboard

If you see the message “No dashboard opened yet” means that have not yet been created dashboard.
Click on the Dashboard button at the center of the page.

Click on the “+” button to create a new dashboard

Give a name to your dashboard, and click on it to open it.

Once open you will see the name of the dashboard. In our case: “Dashboard 1”
The dashboard right now is empty but you can compose with numerous Widgets.