Top Policy Violations Notification Widget
This feature is only available in the new LogRhythm NDR UI.
- Log in to the LogRhythm NDR UI.
- Click the blue Try New UI tab at the top-right corner of the Dashboard.
A new tab appears that allows you to log in to the new UI. Log in to the new LogRhythm NDR UI.
For information on how to set up a log in for the new NDR UI, see Log in to the New NDR UI.
In the Dashboard, the Top Policy Violation widget appears.- To select the time interval, use the date range picker at the top-right corner of the Dashboard.
- To see the cursor tool tip, place the mouse over the entries in that widget.
More information for that particular widget appears, including UUID, State, and Entry type. - To see more values (like Certainty, Severity, and Score), place the mouse over the image in that particular entry.
- Change the settings at the top of the widget to do the following:
Change the number of items shown in this widget.
Switch between incidents and policy violations.
Sort the entries in this widget by Certainty, Severity, or Score. - To go to the respective Policy violation page or incident page, click the entry in the widget.
Log in to the New NDR UI
- Log in to the LogRhythm NDR UI.
- In the top right of the page, place your cursor over your profile name and role and click Edit Profile.
The Edit Profile page appears. - To enable the Keycloak login, click the Enable Keycloak Login checkbox.
The Credentials for Keycloak login box appears. - Type a new password in the Password field and in the Confirm Password field and click Create.
The message "Created Successfully" appears. - Click Ok.
- Click the blue Try New UI tab.
The new UI opens in a new tab. - Enter your username and new password you created and click Sign In.
The Dashboard of the new UI appears.