Event-Data Analysis

What are the Dashboard, Manager Layouts, and Database Layouts?

A component of the TLC Console1. Tripwire LogCenter Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire LogCenter GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. (see TLC Console Views and Components), the DashboardA TLC Console component that presents information about a Manager or Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source.-Management Database in a Layout1. A customizable configuration of panels containing fields, tables, and/or graphs. 2. The configuration and formatting of a table or Event-Relationship Diagram.. presents information about a Manager or Event-Management DatabaseAn optional component of your TLC environmentConsists of all TLC software, Managers, Log Sources, Monitored Assets, Collectors, and data in your TLC installation., an Event-Management Database stores Events. Types of Event-Management Databases include Event Databases, IDS Databases, and Firewall Databases. in a Layout, a customizable configuration of panels containing fields, tables, and/or graphs.

A Manager LayoutA type of Layout that presents information about 1) a selected Manager’s system resources and configuration, and 2) the log messages collected by the Manager's Collectors. presents information about 1) a selected Manager’s system resources and configuration, and 2) the log messages collected by the Manager's Collectors.

A Database LayoutA type of Layout that presents information about the Events in a selected Event-Management Database. (see Figure 44) presents information about the Events in a selected Event-Management Database.

Note

You can also view and configure Database Layouts in the Event-Database ViewerA type of Database ViewerA TLC Console component in which you can review information about Events in Event-Management Databases. Types of Database Viewers include the Event-Database Viewer, IDS-Database Viewer, and Firewall-Database Viewer. in which you can query and work with the data in your Event Databases. (see Working with Database Layouts).

Table 32 describes some common types of Layout Panels that may be added to a Layout. In the TaskCreated and configured in the Task Manager, a Task queries Events, Hosts, or Scanner Events in an Event-Management Database to perform an operation. Types of Tasks include Layout-Panel, Administrative, and Search Tasks. Manager, you can create custom Layout Panels (see Working with Layout-Panel Tasks).

For more information, see:

Working with Manager Layouts

Working with Database Layouts

Table 32. Types of Layout Panels

Type	Description
Configuration Diagram	(Manager Layouts only) Displays a diagram of the Log Sources, Collectors, Managers, Audit Loggers, CorrelationThe examination of Normalized Messages for events of interest, along with the ability to initiate appropriate responses; for example, sending an email notification to specified recipients. Engines, and Event-Management Databases in your TLC environment.
Map	(Database Layouts only) Displays the geographic locations of IP addresses on a map.
Text	Presents data in a table.
Time Graph	Presents a timeline of log messages or Events in a graph.
Top Graph	(Database Layouts only) Displays the Top N items in a graph or chart.

Figure 44.  Example of a Dashboard Layout