Keep watch on the status of your managed systems and any threats in your environment using your customizable dashboard.
Dashboards are collections of monitors that track activity in your Trellix ePO - On-prem environment.
Default dashboards and monitors
The module provides default dashboards and monitors. Depending on your permissions, you can use them as is, modify them to add or remove monitors, or create custom dashboards using Trellix ePO - On-prem.
Adaptive Threat Protection includes the following predefined dashboards.
Dashboard | Monitor | Description |
|---|---|---|
Endpoint Security: Adaptive Threat Protection Enforced Events | Endpoint Security Adaptive Threat Protection: Clean Events for Last 30 Days | Events for actions that were detected and enforced based on the Adaptive Threat Protection policy. |
Endpoint Security Adaptive Threat Protection: Block Events for Last 30 Days | ||
Endpoint Security Adaptive Threat Protection: Allow Events for Last 30 Days | ||
Endpoint Security Adaptive Threat Protection: Clean Events by Event Type | ||
Endpoint Security Adaptive Threat Protection: Block Events by Event Type | ||
Endpoint Security Adaptive Threat Protection: Allow Events by Event Type | ||
Endpoint Security: Adaptive Threat Protection Observed Events | Endpoint Security Adaptive Threat Protection: Observation Clean Events for Last 30 Days | Events, such as Would Block, for actions that would have been taken if the Adaptive Threat Protection actions were enforced. |
Endpoint Security Adaptive Threat Protection: Observation Block Events for Last 30 Days | ||
Endpoint Security Adaptive Threat Protection: Observation Allow Events for Last 30 Days | ||
Endpoint Security Adaptive Threat Protection: Observation Clean Events by Event Type | ||
Endpoint Security Adaptive Threat Protection: Observation Block Events by Event Type | ||
Endpoint Security Adaptive Threat Protection: Observation Allow Events by Event Type | ||
Endpoint Security: Adaptive Threat Protection ML Protect Detection Events | Endpoint Security Adaptive Threat Protection: ML Protect Detection Events for Last 24 Hours | Events for threat detections and actions taken by the ML Protect scanner. |
Endpoint Security Adaptive Threat Protection: ML Protect Detection Events For Last 7 Days | ||
Endpoint Security Adaptive Threat Protection: ML Protect Detection Events For Last 30 Days | ||
Endpoint Security Adaptive Threat Protection: ML Protect Detection Events For Last Quarter |
Custom dashboards (Trellix ePO - On-prem)
Depending on your permissions, you can create custom dashboards and add monitors using default Endpoint Security queries.
For information about dashboards, see the Trellix ePO - On-prem documentation.