talon/talon-cyber-security Dashboards

Widget Description Type

Unsecured Website Accesses

Widget	Description	Type
Unsecured Website Accesses	Hide Query Show Query logscale `#logtype = "talon" \| eventDetails.protocol="http" \| top(url)`	`Bar Chart`
High Risk Devices	Hide Query Show Query logscale `#logtype = "talon"\| severity = "veryHigh" \| groupBy(deviceHostname)`	`Table`
High Risk Events	Hide Query Show Query logscale `#logtype = "talon" \| severity = "veryHigh" \| timechart(function=count())`	`Time Chart`

Hide Query

Show Query

logscale

#logtype = "talon" | eventDetails.protocol="http" | top(url)

High Risk Devices

Hide Query

Show Query

logscale

#logtype = "talon"| severity = "veryHigh"
| groupBy(deviceHostname)

High Risk Events

Hide Query

Show Query

logscale

#logtype = "talon" | severity = "veryHigh" | timechart(function=count())

Widget Description Type

Policy Changes

Widget	Description	Type
Policy Changes	Hide Query Show Query logscale `#logtype = "talon" \| type = "audit" \| timechart()`	`Time Chart`
Latest Policy Changes	Hide Query Show Query logscale `#logtype = "talon" \| eventCategory = "policyRules" \| head(10) \| select([@timestamp, eventType, description])`	`Table`

Hide Query

Show Query

logscale

#logtype = "talon" | type = "audit" | timechart()

Latest Policy Changes

Hide Query

Show Query

logscale

#logtype = "talon" | eventCategory = "policyRules"
| head(10)
| select([@timestamp, eventType, description])

Widget Description Type

Endpoint Activities

Widget	Description	Type
Endpoint Activities	Hide Query Show Query logscale `#logtype = "talon" \| top(eventType)`	`Pie Chart`
Most Viewed Websites	Creates a list of the most viewed websites. Hide Query Show Query logscale `#logtype = "talon" \| top(url)`	`Bar Chart`

Hide Query

Show Query

logscale

#logtype = "talon" | top(eventType)