top servers – Blue Lance https://bluelance.com Mon, 01 Jun 2026 18:19:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://bluelance.com/wp-content/uploads/2025/11/fevicon-ic-1.png top servers – Blue Lance https://bluelance.com 32 32 Using the Dashboard https://bluelance.com/docs/using-the-dashboard/ Thu, 28 May 2026 16:18:30 +0000 https://bluelance.com/?post_type=docs&p=15847 The LT Auditor MP dashboard is the main screen you see after logging in. It provides a real-time overview of activity across your monitored environment, giving administrators and analysts a quick way to spot unusual behavior, check system health, and navigate to more detailed views.

Dashboard overview:

The dashboard is organized into several key areas:

SectionDescription
Activity TrendA graph showing audit event volume over time, helping identify spikes or drops in activity
Top UsersThe most active users by event count across your monitored environment
Top ObjectsThe most frequently accessed or modified objects (files, directories, accounts)
Top ServersThe most active servers by event count
Top OperationsThe most frequently occurring event types (e.g., logins, file reads, object modifications)
Alert StatusA summary of current open alerts requiring attention
Last RefreshTimestamp showing when the dashboard data was last updated

[Your administrator should add a labeled screenshot of the dashboard here to help users orient themselves.]

Navigating the dashboard:

The main navigation menu runs along the left side of the screen and provides access to all modules:

Menu ItemPurpose
HomeReturns to the main dashboard
ManageCreate and manage audit filters and alert rules
ViewBrowse and search audit log data in real time
ReportCreate, schedule, and generate reports
ConfigureSet up receivers, transformation rules, and environments
AdminManage users, roles, system settings, and modules

Customizing your dashboard view:

  1. Use the date range selector at the top of the dashboard to adjust the time period displayed
  2. Click on any metric or chart element to drill down into the underlying event data
  3. Use the environment selector (if available) to filter the dashboard to a specific monitored environment
  4. Click Refresh to manually update the dashboard with the latest data

Understanding the activity trend graph:

The activity trend graph displays event volume over the selected time period. Use it to:

  • Identify spikes in activity that may indicate a security incident
  • Spot drops in activity that may indicate a collection or connectivity issue
  • Establish a baseline of normal activity in your environment over time

If you notice an unexpected spike or flatline, navigate to View to investigate the underlying events in more detail.

Switching between monitored environments:

If your deployment monitors multiple environments (e.g., Windows, eDirectory, Azure), you can switch between environment-specific dashboards:

  1. Navigate to the relevant environment from the dashboard or View menu
  2. The dashboard will update to reflect activity for the selected environment only

Best practices:

  • Check the dashboard at the start of each shift or workday as a quick health check
  • Investigate any alert notifications visible on the dashboard before moving on to other tasks
  • Use the activity trend graph to establish a sense of normal traffic patterns — this makes anomalies easier to spot over time
  • If the Last Refresh timestamp is significantly behind the current time, check that all services and agents are running correctly
]]>