View Dashboard

The View module provides real-time and historical access to audit log data through customizable, interactive interfaces. Unlike reports, which produce static snapshots, views give live access to log data as it is collected — making them the primary tool for monitoring activity, investigating incidents, and browsing audit data day to day. This article covers how to set up and configure views; for guidance on searching and filtering within a view see the Searching & Filtering Events article.

Understanding views:

Views are customizable interfaces for browsing and analyzing audit log data in real time. Each view is tied to a specific environment and category and can be configured with its own default columns, filters, and date range. Views can be saved, shared, duplicated, and marked as favorites for quick access.

Accessing the View module:

1. Log in to the LT Auditor ^MP web portal
2. Navigate to View in the main navigation menu
3. Select a saved view from the list, or create a new one
4. The log table displays audit records matching the view’s configuration

Creating a view:

Requires appropriate permissions.

1. Click Create View
2. Configure the view settings:

3. Click Save

Configuring view columns:

Customize which fields are displayed in the log table:

1. Open the view configuration
2. Navigate to the Columns tab
3. Select columns from the available log fields:
   • Drag to reorder columns
   • Set column width for optimal display
   • Enable sorting for each column
   • Enable filtering for quick searches directly from the column header
4. Click Save

Setting the default date range:

The default date range determines what data is shown when the view is first opened:

Set a reasonable default date range to avoid loading excessive data when the view is opened. Broad default ranges on high-volume categories can slow initial load times.

Duplicating a view:

To create a similar view quickly without starting from scratch:

1. Open the view to duplicate
2. Click Duplicate View
3. Modify the name and settings as needed
4. Save the new view

Sharing a view:

1. Open the view
2. Click Share
3. Select users or roles to share with
4. Set permissions:
   • View Only — users can view the log data but cannot modify the view configuration
   • Edit — users can modify the view configuration
5. Save the sharing settings

Marking views as favorites:

1. Open the view
2. Click the Star icon
3. Access favorite views quickly from the Favorites section

Auto-refresh and real-time updates:

Views can be configured to refresh automatically so new log data appears without manual intervention:

Use auto-refresh cautiously with large datasets or broad date ranges — frequent reloads against high-volume categories can impact performance.

Best practices:

• Set a reasonable default date range and column selection for each view so it loads quickly and shows the most relevant data immediately
• Use clear descriptive view names that indicate the view’s purpose so other users can identify the right view at a glance
• Create dedicated views for recurring investigation or monitoring scenarios rather than rebuilding filters from scratch each time
• Share commonly needed views with relevant roles so the whole team works from a consistent starting point
• Use auto-refresh selectively — it is most useful for views monitoring smaller, high-priority datasets in real time

[Your administrator should establish and share a standard set of views for the most common monitoring scenarios in your environment.]