Data monitors are views within Dashboards that can be configured to report on events, Filters, Rules, and other areas that are of particular interest to you. Data monitors can be arranged on dashboards in numerous viewing layouts. Data monitors collect summary information on top events, most recent event activity, partial rule occurrences, hourly event counts, or event averages.
Data Monitors on Dashboards:
Once data monitors are created, they can be used to display information on dashboards. You can add one or more data monitors to the same dashboard to create a collection of different "instrument panel" monitors appearing in the Dashboard display in the Viewer panel. Both the data monitors themselves and dashboards on which they are published can be shared among multiple Console users.
Permissions on Data Monitors:
Data monitors display only those events for which you have permission. In addition, if you do not have access to a data monitor, the data monitor does not function. Administrators can limit visibility of or control access to dashboards and data monitors by changing access control lists (ACLs) as needed. For more about this, see Managing Permissions and Controlling Who Has Permissions to Deploy Data Monitors.
Data Monitor Types:
The ArcSight Console offers several predefined types to choose from when creating a new data monitor. The following topics describe the parameter entries and other options you can specify for each supported data monitor type.
You specify the Data Monitor type when you create a data monitor. For information on how to create a data monitor, see Creating a Data Monitor. Also, the data monitors provided with ArcSight are examples of these various types of data monitors.