Application, Rule, and Policy Events Widget

Use this widget to display a distribution summary of Endpoint Application Control application events based on selected criteria.

To learn about adding this widget to your dashboard, go to Managing Widgets.

Figure 1. Application, Rule, and Policy Events Widget Example

Configuring

Go to Dashboard and then select Widget Settings from the menu on the top-right of the widget to do the following tasks:

Table 1. Application, Rule, and Policy Events Widget Configuration Tasks

Task

Steps

Name widget.

Under Title, type a name.

Tip:

Leave this field blank to allow Endpoint Application Control to name the widget based on your configuration.

Select template.

Under Template, select a template.

Edit data scope.

Under Log type, select a scope for data displayed by the widget.

Figure 2. Data Scope

Edit period.

Under Period, select a period for data displayed by the widget.

Edit data source.

  1. Select Advanced.

    The widget displays additional settings.

  2. Under Log type, select a data source for data displayed by the widget.

Figure 3. Data Source

Limit displayed results.

Select Advanced.

Under Limit results to the following, use dynamic search.



See Using Dynamic Search.

Change chart type.

Under Display, select one of the following types of chart:

  • Select for a line chart with data points. (default)

  • Select for a vertical histogram.

  • Select for a horizontal histogram.

  • Select for a pie chart.

  • Select for a data table.

    Note:

    This control is not available if (display data table under chart) is selected.

Change chart size.

To the right of the chart types, select one of the following a chart sizes:

  • Select Small for a chart that is about 1 unit tall.

  • Select Medium for a chart that is about 2 units tall. (default)

  • Select Large for a chart that is about 4 units tall.

Figure 4. Chart Size
Note:

This control is not available if (display data as table) is selected.

Change legend location.

Under Legend, select one of the following locations:

  • None

  • Bottom (default)

  • Right

  • Top

  • Left

Note:

This control is not available if (display data as pie chart) or (display data as table) is selected.

Display chart controls on widget.

Select the Toolbar check box.

Hide chart controls on widget.

Clear the Toolbar check box. (default)

Display data summary table below chart.

Select Data summary table below chart.

Hide data summary table below chart.

Clear Data summary table below chart. (default)

Save configuration as new template.

Under Template, select Save current settings as template.

Delete widget.

Select Close Widget from the menu on the top-right of the widget.

The widget and any customizations you have made to the widget's settings are deleted.

About Templates

This widget includes the following customizable templates:

Note:

Only one template can be displayed at a time.

"Template"

"Log type"

Scope (Default)

"Period" (Default)

"Advanced"

Data Column (Default)

"Advanced"

Dynamic Search (Default)

Applications without Rules

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Name

Rule is Empty

Applied Policies

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Policy

Policy is Not Empty

Blocked Applications

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Name

Action Taken is Blocked

Used Applications

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Name

Action Taken is Allowed

Violated Policies

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Policy

Policy is Not Empty

AND

Action Taken is Blocked

Violated Rules

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Name

Rule is Not Empty

AND

Action Taken is Blocked

Violating Endpoints

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

Endpoint Name

Action Taken is Blocked

Violating Users

Application Event

Important:

This data matches the log type "Policy actions".

Top 3

Last 14 days

User Name

Action Taken is Blocked