Security Teams are Choosing Graylog for their SOC | WHY SWITCH? >>>

Dashboards

A big picture of what’s happening in your environment is essential to keeping your business up and running. Graylog lets you do this in one screen with dashboards.

Dashboards give you clear visualizations of your search query results for quick, high-level insights into issues. Then drill down for more detailed information to help you identify key trends and take action.

At times, it might take domain knowledge to analyze search queries and draw the correct conclusions. If that’s the case, people with that knowledge can define the search query once, and then use a dashboard to share that information at a higher level without everyone needing to get into the details.

When you need to see all the surrounding elements on your laptops, computers, and/or monitors on one screen, you can switch to Full Screen Dashboard for better viewing.

HOW IT WORKS

Graylog supports a wide variety of widgets that let you quickly visualize data from your logs. Adding search result information is easy and quick. Once you add widgets to the dashboard, you can rearrange and configure those widgets to customize the look.

Advanced data aggregation allows you to combine different types of data in a single chart so you can perform multiple aggregations on the same field and/or present different types of aggregations on different fields in the same chart. This enables a pivot table-like experience.

You can also add widgets from stream search results. Every widget you add this way will always be bound to streams. The Graylog streams are a mechanism to route messages into categories in real-time while they are processed. You define rules that instruct Graylog which message to route into which streams.

FREQUENTLY ASKED QUESTIONS

CAN EVERYONE SEE DASHBOARDS?
Graylog users assigned to the Admin role can view and edit all dashboards. Graylog users assigned to the Reader role are, by default, not allowed to view or edit any dashboard. However, you can create new roles that grant the permissions you wish.
WHAT WIDGETS ARE AVAILABLE?
You can add any of the following widgets to your dashboard. You can find more information about each of these in the Graylog documentation.
‍
– Search result counts
– Search result histogram chart
– Statistical values
– Field value charts
– Stacked charts
– Quick value results
DOES COMPUTING WIDGET VALUES ACROSS MULTIPLE BROWSERS AND TABS AFFECT MY SERVER RESOURCES?
Widget values are cached on the Graylog server by default. That means the cost of computing those values does not grow each time a new browser tab displays a dashboard.