Managing the UEBA dashboard views

You can customize UEBA dashboard views, including light or dark mode, and filter on attributes that include domain, city, country, or state from a user import.

Before you begin

You must install, configure, and import users into the UEBA app that contain location or domain data.

About this task

You must have Admin permissions to manage the dashboard views. The dashboard views are not available if there are no imported users that contain location or domain data.

Procedure

  1. Select the User Entity Analytics tab.
  2. On the main UEBA Overview (Dashboard) page, from the filter box, click Viewing: All users
    The following example shows 4.0.0 with light theme UI.
    Manage dashboard views
  3. Click the Manage dashboard views icon.
    The following example shows 4.0.0 with light theme UI.
    Manage dashboard icon
  4. On the Manage dashboard views screen, create or edit views to filter the users that are displayed on the UEBA Overview (Dashboard) page.
  5. For each view you want to create, enter the following information:
    • View name: Enter a descriptive name for each view. For example, "US employees".
    • Attribute: Select from domain, state, country, or city.
    • Value: Select one or multiple values based on the attribute selection.
    The following example shows 4.0.0 with light theme UI.
    Manage dashboard views
  6. Click Save.
  7. To create another view, click Create new view. Note that you can create up to 30 views.
    The views that you create are available from the filter box in step 2.