Available dashboards in Splunk Enterprise Security

Splunk Enterprise Security includes more than 100 dashboards that provide integrated views and communicate key data that you can customize and share with intended end users. Use Splunk Enterprise Security dashboards to identify and analyze findings and investigations, reveal insights in your events, accelerate investigations, monitor the status of various security domains, and audit your investigations and your Splunk Enterprise Security deployment.

You can also customize Splunk Enterprise Security dashboards to fit your use case. For more information, see Customize Splunk Enterprise Security dashboards to fit your use case.

In Splunk Enterprise Security version 8.8 and higher, many dashboards have been consolidated to reduce navigational clutter and improve usability. You must reset the navigation by going to Configure > General > Navigation and selecting Restore Default Navigation to see the dashboard updates.

Follow these steps to access the various dashboards in Splunk Enterprise Security:

  1. In Splunk Enterprise Security, go to Analytics.

  2. Select the dashboard category that you want to access from the Analytics panel.

    The following list outlines the dashboard category options that you can select:

    • Security posture

    • Executive summary

    • SOC operations

    • UEBA

    • Exposure analytics

    • Threat intelligence

    • SOC agents value

    • Automation system insights

    • Metrics

    • Analysis

    • Audit and health

    • Cloud security