Procedure

1. Open the SMS Web Dashboard.
2. Click New Widget.
3. Select a widget template, and then click Next.
4. Select whether to include the top three, top five, or top 10 data.
5. Select a filter from the Aggregated Filters drop-down list.

   Aggregate Field	Name	Description
   time_end	Event Time	Time at which the notification was logged and send to the SMS Web Management console.
   src_ip_addr	Source IP Address	Source IP of the packet causing the notification.
   src_port	Source Port Number	Source port of the packet.
   dst_ip_addr	Destination IP Address	Destination IP of the packet.
   dst_port	Destination Port Number	Destination port of the packet.
   src_geography_id	Source Geography ID	Identifier for the geographic location of the source IP address.
   src_country_code	Source Country Code	Country code for the geographic location of the source IP address.
   src_country	Source Country	Country for the geographic location of the source IP address.
   src_latitude	Source Latitude	Latitude for the geographic location of the source IP address.
   src_longitude	Source Longitude	Longitude for the geographic location of the source IP address.
   dst_geography_id	Destination Geography ID	Identifier for the geographic location of the destination IP address.
   dst_country_code	Destination Country Code	Country code for the geographic location of the destination IP address.
   dst_country	Destination Country	Country for the geographic location of the destination IP address.
   dst_latitude	Destination Latitude	Latitude for the geographic location of the destination IP address.
   dst_longitude	Destination Longitude	Longitude for the geographic location of the destination IP address.
   signature_id	Signature ID	Identifier used to map this alert.
   action_set_id	Action Set ID	Action set.
   device_id	Device ID	Identifier for the device that sent the notification.
   virtual_segment_id	Segment ID	Identifier for the device segment for the alert.
   policy_id	Hit Count	Identifier used to map this alert.
   severity_id	Severity ID	Severity ID of the event.
   hit_count	Hit Count	Counter that displays the number of times the event triggered before the notification was sent to the SMS Web Management console.
   xff_ip_addr	X-Forwarded-For IP Address	The X-Forwarded-For IP address. Capture Additional Event Information must be enabled on the profile.
   tcip_ip_addr	True-Client-IP Address	The True-Client-IP address. Capture Additional Event Information must be enabled on the profile.
   signature_name	Signature Name	Signature name.
   action_set_name	Action Set Name	Name of the action set.
   policy_name	Policy Name	Name of the policy for the event.
   severity_name	Severity Name	Severity name.

6. If you select the Events Blocked Rate template, select field parameters from the drop-down lists.
7. Select the time used to aggregate data points over a specified time period.
8. Select a widget type.
9. Enter a name in the Widget Title field.
10. Click Create.