Custom Dashboards (Beta)

Overview

Custom dashboards in Panther allow you to group data visualizations that provide insights tailored to your organization's needs. You can customize each dashboard to display key metrics, such as data ingest volume, alert volume, and any other trends you'd like to monitor at a glance.

A custom dashboard is made up of one or more visualizations, or "widgets." Each visualization is generated from a PantherFlow query using the visualize operator.

Learn how to build a custom dashboard, access your custom dashboards, and more, below.

Creating a custom dashboard and adding visualizations

To build a custom dashboard, first you will create the dashboard, then you will add one or more visualizations.

Creating a custom dashboard

You can create a custom dashboard in the Panther Console from either the Dashboard or Search page.

Adding a visualization to a custom dashboard

After you have created a custom dashboard, you can add a visualization widget to it. You can only add visualizations to dashboards you created.

1. In the left-hand navigation bar of your Panther Console, click Investigate > Search.

2. Run a PantherFlow search that uses the visualize operator.

   • Learn more about how to run a PantherFlow query in Search here.

3. In the top-right corner of the resulting visualization, click the three dots icon, then + Add to dashboard....

4. Select the name of the custom dashboard you'd like to add the visualization to.

   • The visualization is added to the custom dashboard. In the notification displayed in the lower-left corner of the screen, click Go to dashboard to view the dashboard.

Viewing a custom dashboard and its PantherFlow queries

A dashboard is made up of one or more visualizations, each powered by a PantherFlow query.

Viewing a custom dashboard

To view a custom dashboard in your Panther Console:

1. In the left-hand navigation bar of your Panther Console, click Dashboard.

   • This is the landing page when logging into the Panther Console.

2. In the upper-left corner, click Overview.

3. Under Custom Dashboards, select the dashboard you'd like to view.

Viewing a visualization's PantherFlow query

It may be helpful to see the PantherFlow query underlying a visualization widget.

To see the related PantherFlow query:

1. In the upper right-hand corner of the visualization widget for which you'd like to view the PantherFlow query, click the three dots icon.

2. Click Go to PantherFlow query.

• You will be redirected to Search and the associated PantherFlow query will load and execute.

Updating a custom dashboard

Once you have created a custom dashboard, you can update its name or emoji. Once you have added visualization widgets to the dashboard, you can edit them as well as reposition and resize them.

You can only update custom dashboards you created.

Editing a visualization

You can edit a visualization widget from a custom dashboard you created.

To edit a visualization widget in a custom dashboard:

1. View the custom dashboard containing the visualization widget you'd like to edit.

2. In the top-right corner of the visualization widget you'd like to edit, click the three dots icon.

3. Click Edit visualization settings.

   
4. Make desired updates in the Edit visualization settings pop-up modal.

   • If you'd like to update attributes of the visualization (such as the chart title or orientation), follow either the Using form or Using PantherFlow instructions below.

   • If you'd like to update the PantherFlow query underlying the visualization outside of the visualize operator annotations (e.g., you'd like to add a where clause), follow the Using PantherFlow instructions below.

Updating the name or emoji of a custom dashboard

1. View the custom dashboard you'd like to update.

2. Hover over the title of the dashboard, then click the pencil (Edit Title) icon.

3. Update the Dashboard Name value and/or select a new emoji.

4. Click the check mark icon to save your changes, or the X icon to discard your changes.

Customizing the layout of a custom dashboard

You can adjust both the size and position of each visualization widget in a custom dashboard. Changes made to widget size and position will be saved automatically after changes have stopped for a short period of time. You can only customize the layout of dashboards you created.

Resizing a visualization widget

To change the size of a widget:

1. Hover over the lower right-hand corner of a widget.

2. Click and drag the corner to resize the widget to the desired size.

Repositioning a visualization widget

To change the position of a widget:

1. Hover over the widget's title.

2. Click and drag the widget to its new location within the dashboard.

Deleting a custom dashboard or its visualizations

Deleting a custom dashboard

Once a dashboard is deleted, it will not appear in any dashboard lists. You can only delete dashboards you created. If you only need to delete a visualization from a dashboard (and not the entire dashboard as a whole), see Deleting a visualization in a custom dashboard, below.

To delete a custom dashboard:

1. View the custom dashboard you'd like to delete.

2. Once the selected dashboard is loaded, hover over its title, then click the trash can icon.

3. In the Delete Dashboard? pop-up modal, click Confirm.

   • The dashboard will be deleted and a confirmation notification will be displayed in the lower left-hand corner of the Console window.

   • To revert the deletion, in the confirmation notification, click Undo.

Deleting a visualization in a custom dashboard

You can only delete a visualization widget from a custom dashboard you created.

To delete a visualization widget from a custom dashboard:

1. View the custom dashboard containing the visualization widget you'd like to remove.

2. In the top-right corner of the visualization widget you'd like to remove, click the three dots icon.

3. Click Remove visualization.

   

Limitations of custom dashboards

Custom dashboards currently have the following limitations:

• Your Panther instance can store up to 1,000 custom dashboards.