Anomali Dashboards Overview

Anomali dashboards provide a powerful way to visualize and analyze critical security and IT operations data related to your organization. You can leverage pre-built, Anomali-curated ThreatStream and Security Analytics dashboards or create custom dashboards tailored to the needs of your organization.

Key Dashboard Features

  • AQL-Powered Dashboards: Build dashboards using custom AQL queries or utilize pre-built, AQL-based ThreatStream dashboards.

  • Customizable Panels and Tabs: Configure dashboard panels across one or more tabs to focus on threat intelligence and operational data relevant to your organization.

  • Multiple Visualization Types: Use various data visualization types, such as bar charts, pie charts, tables, and so on, to interpret complex data more efficiently.

  • Advanced Data Filtering: Filter displayed data with the help of dashboard variables.

  • Copilot Widget for AI intelligence: AI-powered widget that lets you ask a question about any panel in the dashboard and provides critical insights on threat hunting, enrichments, integrators, and more.

  • Configurable Lookback Window: Gain retrospective insights into your data with a configurable lookback period.

  • Various Sharing Options: Share and export dashboards for collaboration and easy data accessibility.

  • MSSP Support: Anomali Dashboards are supported for the Managed Security Service Providers (MSSP) feature.

Note: Dashboards support both the eventlog and OCSF Version 1.2 schema fields with dotted notation. See OCSF Schema Overview for more information on the OCSF fields and naming conventions.

For more information on pre-built ThreatStream dashboards, refer to ThreatStream Content Dashboards.

For more information on pre-built Security Analytics dashboards, refer to Security Analytics Content Dashboards.

For more information on custom dashboards, refer to Custom Dashboards.