Dashboards

Dashboards provide visual representations of security data within Foundry apps. They combine LogScale queries with configurable widgets to create interactive data views.

Creating a dashboard

In the Falcon console

1. In the App Builder, go to Dashboards.
2. Click Create dashboard.
3. Enter a name and description.
4. Add widgets to the dashboard canvas.

Dashboard widgets

Each widget is powered by a LogScale query and renders the results in a specific visualization:

Widget type	Description
Table	Tabular data with sortable columns
Bar chart	Horizontal or vertical bar charts
Line chart	Time-series line charts
Pie chart	Proportional data display
Counter	Single numeric value with optional trend indicator
World map	Geographic distribution of events

Adding a widget

1. Click Add widget on the dashboard canvas.
2. Select the widget type.
3. Write or select a LogScale (CQL) query.
4. Configure the visualization settings (axes, grouping, colors).
5. Set the time range and refresh interval.

Scheduled reports

Dashboards can generate scheduled reports that are automatically delivered via email or stored for later review.

1. Open the dashboard.
2. Click Schedule report.
3. Configure the schedule (frequency, time, recipients).
4. Select the output format.

For a complete walkthrough of building a dashboard with scheduled reports, see Build a Threat Hunting Dashboard.