Discovering analytics

Prev Next

Use application=analytics_reporter in searches to find all analytics.

Analytic advisories are dynamically generated once a day. The analytic_supported field is true when data that supports the detector exists in your environment. There could be a supported analytic with no hits. For example, all "logon" events are supported, but only abnormal logon events become advisories.

A custom dashboard summarizes analytics reporter data. To view the dashboard, from the main menu select Dashboards > Custom > Helix - Analytics Tracker.