Updated: September 15, 2017
This topic documents how to use the Respond menu, and how to work with nDepth widgets.
For details about each nDepth widget type, also see nDepth view in the LEM console.
The Respond and Explore drop-down menus are located at the top of the nDepth view.
Use the actions in the Respond drop-down menu to respond to an issue reported in your nDepth search results. For example, you can block a hostile IP address or send a user account a pop-up message if you see an unusual event.
See About LEM response actions for more information.
Run a search in nDepth. See Search normalized data using nDepth search in LEM or Search raw log messages using nDepth search in LEM for help.
nDepth provides a set of default widgets similar to the widgets in the Ops Center.
Each widget represents a high-level graphical view of the specific network activity associated wit h your nDepth search results. The widget displays the primary items generating an activity, as well as the count (or number of incidents) for each item.
Use nDepth explorer views to create new widgets, change the look of existing widgets, add widgets to the nDepth Dashboard, and remove widgets you no longer use. Click refresh on the widget toolbar to display the latest data from your network.
Click or point to an item in the widget to view details and statistics about the item.
You can use items in widgets or any of the nDepth graphical tools to create new search strings, or to append existing search strings.
On the search bar, click
to delete the existing search string.
Click an item on a widget.
A new search string associated with the widget item appears in search box.
To append an existing search string with an item from a widget, click an item on the widget. In the search box, a new search string associated with the widget item is appended to the existing search string.
Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.
Choose Explore > nDepth.
Click a view on the nDepth toolbar, such as bar charts, line charts, pie charts, or bubble charts.
The corresponding view appears.
On the view title bar, click to open the nDepth widget builder.
Complete the widget builder selections to configure the new widget.
The new widget appears at the bottom of the chart view.
When you configure the widget and choose the Save to Dashboard option, the new widget also appears at the bottom of the nDepth dashboard.
Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.
Choose Explore > nDepth.
Click a view on the nDepth toolbar, such as bar charts, line charts, pie charts, or bubble charts.
Click on the widget you want to edit.
Use the nDepth Widget Builder to reconfigure the widget.
The updated widget appears at the bottom of the view.
When you configure the widget and choose the Save to Dashboard option, the new widget also appears at the bottom of the nDepth dashboard.
Click to refresh the widget data.
You can add an nDepth view (such as word cloud, tree view, or result details) to the nDepth Dashboard. The word cloud, tree view, and result details view display by default. If you remove a view from the dashboard, use this procedure to restore the view.
Open the LEM console. See Log in to the LEM web console or Log in to the LEM desktop console for steps.
Choose Explore > nDepth.
Use the nDepth explorer toolbar to open the chart view you want to work with.
In the view, locate the chart widget you want to add to the dashboard.
In the widget toolbar, click to move the widget to the dashboard.
The widget is copied to the bottom of the nDepth Dashboard.
Click to minimize the widget in the dashboard. To restore the widget, scroll down and click the widget title bar.
See also: