talon/talon-cyber-security Dashboards

Widget Description Type

Widget	Description	Type
Unsecured Website Accesses	Displays a chart of unsecured website access events. Hide Query Show Query logscale `#logtype = "talon" \| eventDetails.protocol="http" \| top(url)`	`Bar Chart`
High Risk Devices	Displays a table of devices with a risk severity rating of 'very high'. Hide Query Show Query logscale `#logtype = "talon"\| severity = "veryHigh" \| groupBy(deviceHostname)`	`Table`
High Risk Events	Displays a chart of high risk events. Hide Query Show Query logscale `#logtype = "talon" \| severity = "veryHigh" \| timechart(function=count())`	`Time Chart`

Displays a chart of unsecured website access events.

Show Query

Displays a table of devices with a risk severity rating of 'very high'.

Show Query

Displays a chart of high risk events.

Show Query

Widget Description Type

Widget	Description	Type
Policy Changes	Displays a chart of policy changes in audit format. Hide Query Show Query logscale `#logtype = "talon" \| type = "audit" \| timechart()`	`Time Chart`
Latest Policy Changes	Displays a list of the latest policy changes. Hide Query Show Query logscale `#logtype = "talon" \| eventCategory = "policyRules" \| head(10) \| select([@timestamp, eventType, description])`	`Table`

Displays a chart of policy changes in audit format.

Show Query

Displays a list of the latest policy changes.

Show Query

Widget Description Type

Widget	Description	Type
Endpoint Activities	Displays a pie chart of endpoint activities. Hide Query Show Query logscale `#logtype = "talon" \| top(eventType)`	`Pie Chart`
Most Viewed Websites	Creates a list of the most viewed websites. Hide Query Show Query logscale `#logtype = "talon" \| top(url)`	`Bar Chart`

Displays a pie chart of endpoint activities.

Show Query

Creates a list of the most viewed websites.

Show Query