talon/talon-cyber-security Dashboards

Talon Alerting Activities

Widget Description Type

Widget	Description	Type
Unsecured Website Accesses	Displays a chart of unsecured website access events. Hide Query Show Query logscale `#logtype = "talon" \| eventDetails.protocol="http" \| top(url)`	`Bar Chart`
High Risk Devices	Displays a table of devices with a risk severity rating of 'very high'. Hide Query Show Query logscale `#logtype = "talon"\| severity = "veryHigh" \| groupBy(deviceHostname)`	`Table`
High Risk Events	Displays a chart of high risk events. Hide Query Show Query logscale `#logtype = "talon" \| severity = "veryHigh" \| timechart(function=count())`	`Time Chart`

Displays a chart of unsecured website access events.

Hide Query

Show Query

logscale

#logtype = "talon" | eventDetails.protocol="http" | top(url)

Bar Chart

Displays a table of devices with a risk severity rating of 'very high'.

Hide Query

Show Query

logscale

#logtype = "talon"| severity = "veryHigh"
| groupBy(deviceHostname)

Table

Displays a chart of high risk events.

Hide Query

Show Query

logscale

#logtype = "talon" | severity = "veryHigh" | timechart(function=count())

Time Chart

Talon Policy Activities

Widget Description Type

Widget	Description	Type
Policy Changes	Displays a chart of policy changes in audit format. Hide Query Show Query logscale `#logtype = "talon" \| type = "audit" \| timechart()`	`Time Chart`
Latest Policy Changes	Displays a list of the latest policy changes. Hide Query Show Query logscale `#logtype = "talon" \| eventCategory = "policyRules" \| head(10) \| select([@timestamp, eventType, description])`	`Table`

Displays a chart of policy changes in audit format.

Hide Query

Show Query

logscale

#logtype = "talon" | type = "audit" | timechart()

Time Chart

Displays a list of the latest policy changes.

Hide Query

Show Query

logscale

#logtype = "talon" | eventCategory = "policyRules"
| head(10)
| select([@timestamp, eventType, description])

Table

Talon User Activities

Widget Description Type

Widget	Description	Type
Endpoint Activities	Displays a pie chart of endpoint activities. Hide Query Show Query logscale `#logtype = "talon" \| top(eventType)`	`Pie Chart`
Most Viewed Websites	Creates a list of the most viewed websites. Hide Query Show Query logscale `#logtype = "talon" \| top(url)`	`Bar Chart`

Displays a pie chart of endpoint activities.

Hide Query

Show Query

logscale

#logtype = "talon" | top(eventType)

Pie Chart

Creates a list of the most viewed websites.

Hide Query

Show Query

logscale

#logtype = "talon" | top(url)

Bar Chart

Integrations

Packages

Other Integrations

Log Formats

talon/talon-cyber-security Dashboards

Talon Alerting Activities

Talon Policy Activities

Talon User Activities

Enter search term