--- title: "Viewing the Dashboard" canonical: "https://docs.infoblox.com/space/BloxOneCloud/35365936/Viewing%20the%20Dashboard" format: markdown --- The **Dashboard** focuses on providing business visibility through the following workspaces: Asset, Security, and Networking. These workspaces are tailored to deliver real-time insights and visualizations, so you can keep track of critical metrics and system health**.** - The **Assets** workspace is the default workspace for the **Monitor **page. It displays real-time statistics about your network assets. You can view information related to assets that are in the zombie, unregistered, non-compliant state. For information, see *[Viewing the Assets Workspace](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneCloud/pages/847119201)*. - The **Security** workspace displays information related to blocked and detected threats in your system. For information, see *[Viewing Security Workspace](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneThreatDefense/pages/1613758759)*. - The **Network** workspace give you an at-a-glance view of the networking statistics, such as domain resolution time, IP address utilization, and the percentage of available services that are currently running on your NIOS-X servers. For information, see *[Viewing the Network Workspace](https://infoblox-docs.atlassian.net/wiki/spaces/BloxOneCloud/pages/1196590637)*. > ℹ️ **Known Issue** > ℹ️ > ℹ️ **1. The Rollup Summary is not displaying full result numbers. The result numbers are masked by the "..." abbreviation.** > ℹ️ > ℹ️ **Workaround**: In order to view the result numbers, the page resolution must be resized to 50 percent of its normal size. To resize your browser window, follow the instructions below based on your operating system. Alternatively, hover over the tool tip to view the non-masked, total result numbers. > ℹ️ > ℹ️ - **Windows**: To resize the browser page resolution on a Windows machine, use the keyboard shortcut **Ctrl + -** to zoom out; to reset to the default size, use **Ctrl 0**. you can also access zoom settings through your browser menu and adjust the zoom level there, or use the mouse scroll wheel while holding down the **Ctrl** key to zoom in or out. > ℹ️ **OSX**: To resize the browser page resolution on an OSX machine, use the keyboard shortcuts **Command -** to zoom out; to reset to the default size, use **Command 0**. You can also access these options through the browser's "View" menu. > ℹ️ - **Linux**: To resize the browser page resolution on a Linux machine, use the keyboard shortcut **Ctrl +** Mouse Wheel while holding down the "Ctrl" key, which allows you to zoom in and out of the webpage with the mouse scroll wheel; you can also access zoom options directly within your browser settings menu. > ℹ️ - **iOS**: To resize the browser page resolution on an iOS device, simply use the **pinch-to-zoom** gesture on the screen; pinch your fingers together to zoom out and make the page smaller, or spread your fingers apart to zoom in and make the page larger. > ℹ️ - **Android**: To resize a browser page resolution on an Android device, use the zoom function within your browser app: open the webpage, then pinch your fingers together to zoom out or spread them apart to zoom in; you can also access zoom settings within the browser menu to adjust the default zoom level for all pages. > ℹ️ > ℹ️ **2. Roll-up widgets may not render correctly in generated PDFs. If the zoom level is set to 50% or lower, some roll-up widgets, such as pie charts may not render correctly in the generated PDF. This behavior was observed for pie charts and other graphs in the following browsers: Google Chrome, Mozilla Firefox, and Microsoft Edge. ** > ℹ️ > ℹ️ **Workaround**: Increase the browser zoom level to above 50% before generating the PDF resoves the rendering issue. > Macro (excerpt) > > The Dashboard provides a quick overview of the overall health of your Infoblox services. It displays widgets that give you snapshots of the high-level traffic within your network infrastructure, the RPZ hits per policy, and the categories of threats that affect your organization most often. Widgets are the building blocks of your Dashboard*, *and you can add or remove them to customize the Dashboard to suit the needs of your organization. > > Certain widgets can display data in a bar chart or an area chart, and you can toggle between these charts. To view detail about specific data points on a chart, pause the cursor across the X and Y axis. You can also filter data elements in the legend of a chart and dynamically update the chart to display data most critical to you. > > # Managing Widgets > > To add a widget: > > 1. In the Infoblox Portal, click **Dashboard**. > 2. Select one of the available types of widgets by choosing one of the following from the **Dashboard** drop-down menu: > - **Security**: contains all widgets related to security > - **DDI**: contains all widgets related to DNS, DHCP, and IPAM > - **License Utilization**: contains all widgets related to entitlements > 3. In the top-right corner of the Dashboard, click **+Widgets**. > 4. In the panel on the right, click the **+** sign next to the widget you want to add to the Dashboard. > > To move or resize a widget, use the down arrow in the bottom-right part of the widget. > > To remove a widget, click the **x** icon on the widget. > > ## Security Widgets > > Infoblox Platform provides the following security-related widgets: > > - **Action Taken **displays information on action taken for incidents occurring on your network. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Security Events** page, which contains additional information. > - **Infoblox Endpoint Activity** displays a rollup summary of the total number of all unique endpoints on your network. Each unique threat is further broken down by severity: **High**, **Medium**, or **Low**. Clicking a data point on the widget will redirect you to the **Security Activity **report** > Security Events **page, which contains additional information. > - **Communications Threat Class and Remote Target **displays the top ten types of malware-related communications and the top destinations that malware has reached on your network. By highlighting individual segments of a malware, you can easily zoom in to explore and focus on smaller segments of the tree map. Clicking a data point on the widget will redirect you to the **Security Activity **report **> DNS Firewall **page**,** which contains additional information. > - **Configuration and Endpoints** displays the DNS servers, detected endpoints, mobile clients, and other details of your installation. Clicking a data point on the widget will redirect you to the **Manage** > **DNS **page, which contains additional information. > - **Content Filtration** displays information about content filtration. To receive data with this widget, configure at least one category web filter. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Web Content** page, which contains additional information. > - **Data Exfiltration Incidents **displays the number and types of data exfiltrations occurring your network. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Threat Insight **page, which contains additional information. > - **Device Activity** displays the number of unique devices observed on your network, broken down by percentage: **High**, **Medium**, or **Low**. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Device** page, which contains additional information. > - **Communications Threat Class and Remote Target **displays the top ten types of malware-related communications and the top destinations.  > - **Devices by Type **displays the types of endpoint devices on your network.  > - **Devices by Threat Hits **displays the total number of all unique devices. Each unique device is further broken down by severity: **High**, **Medium**, or **Low**. > - **DNS Firewall Activity** displays the amount of DNS firewall activity, broken down by severity: **High**, **Medium**, or **Low**. Clicking a data point on the widget will redirect you to the **Security Activity **report **> DNS Firewall** page, which contains additional information. > - **Endpoint Threat Activity** displays endpoint-related threat activity occurring on your network. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Security Events** page, which contains additional information. > - **High Severity by Threat Feed/Custom List** displays a pie chart and a list of feeds and custom lists where severity is High. This widget correlates “high” to the number of threats in a threat feed or a custom list that contained the indicator of a threat. Clicking a data point on the widget will redirect you to the **Security Activity** report > **Security Events**** **page, which contains additional information. > - **High Severity by Threat Feed/Custom List Not Blocked** displays a pie chart and a list of feeds or custom lists where severity is High and the threats were not blocked. This widget correlates “high” to the number of threats in a threat feed or a custom list that contained the indicator of a threat and ended up with a block of the threat (feed effectiveness). This data is highly dependent on the order of rules used within the blocking policy. Clicking a data point on the widget will redirect you to the **Dossier Threat Report Dashboard page**, which contains additional information. > - **Impacted Devices**: Displays information about the impacted devices seen on your network. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Devices** page, which contains additional information. > - **Rollup Summary** displays a summary of web and enterprise activity seen across your organization, as well the types of threats that are not blocked by the policy. The rollup summary contains **DATA EXFILTRATION INCIDENTS**, **DNS FIREWALL ACTIVITY**, **ACTION TAKEN** (blocked, redirected, allowed/logged), **HIGH SEVERITY EVENTS NOT BLOCKED**, **ENDPOINT THREAT ACTIVITY**, **IMPACTED DEVICES, THREAT ACTIVITY**, and **TOTAL DNS ACTIVITY**. Your organization should strive to see zero allowed threats on the **Rollup Summary** widget.  > - **Threat Activity** displays the percentage of threat activity observed on your network, broken down by severity: **High**, **Medium**, or **Low**. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Security Events** page, which contains additional information. > - **Top Attackers** displays the top attackers affecting your organization. Clicking a data point on the widget will redirect you to the **Dossier Threat Report Dashboard **page, which contains additional information. > - **Top Blocked Web Destinations** displays the web destinations that are requested by users in your organization most frequently but are blocked by the organization’s web content policies. Clicking a data point on the widget will redirect you to **Dossier**, which contains additional information. Clicking a data point on the widget will redirect you to the **Dossier Threat Report Dashboard** report, which contains additional information. > - **Top Detected Properties** displays the properties detected within your organization most often. Clicking a data point on the widget will redirect you to the **Security Activity** report > **DNS Firewall** page, which contains additional information. > - **Top Devices by Total DNS Activity** displays top ten system endpoints ranked by amount of DNS query activity. Clicking a data point on the widget will redirect you to the **DNS Activity** report > **DNS** page, which contains additional information.  > - **Top High Severity Infoblox Endpoints** displays the device name and user name with the total number of hits for each device name. Clicking a data point on the widget will redirect you to the **Security Activity** report > **Security Events** page, which contains additional information. > - **Top High Severity Infoblox Endpoints Not Blocked** displays the device name and user name with the total number of hits for the device where policy action is logged. Clicking a data point on the widget will redirect you to the **Security Activity** report > **Security Events **page, which contains additional information. > - **Top Malware** displays the types of malware that has the most impact on your organization. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Threat View **page**,** which contains additional information. > - **Top Requested Domains** displays the domains requested within your organization most often. Clicking a data point on the widget will redirect you to the **Dossier Threat Report Dashboard**** **page, which contains additional information. > - **Top Devices with High Severity Threats** displays the top ten devices triggering security events rated “high” in severity. This is often referred to as the “troublemaker list.” The list will show a device’s name when it is available and will fall back to showing the device’s IP address when the name is unavailable. Clicking a data point on the widget will redirect you to the **Security Activity** report > **Security Events** page, which contains additional information. > - **Top Threat Classes within Organization** displays the top threat classes affecting your organization, such as data exfiltration, custom list, DGA, and others. To drill down to the second or third level of data, click the respective area on the chart. Clicking a data point on the widget will redirect you to the **Security Activity **report **> Threat View **page**,** which contains additional information. > - **Top Threat Feeds** displays the threat intelligence feeds that are enabled in your security policies and contain the highest number of hits in your organization. Clicking a data point on the widget will redirect you to the **Security Activity **report** > Security Events **page, which contains additional information. > - **Total DNS Activity** displays the total number of DNS activities within your organization. Clicking a data point on the widget will redirect you to the **DNS Activity **report **> DNS** page, which contains additional information. > > ## DDI Widgets > > > Click > Macro (inline-media-image) > >  to filter the objects by **Host**. You can do a side-by-side comparison of the same metric on different hosts. The options available are **DHCP Leases per Second**, **DNS Queries per Second**, and **DNS Responses**. For widgets that display charts, you can pause the cursor on the chart to view more information about each section. You can also select or deselect a legend to display respective data. > > Infoblox Platform provides the following DDI-related widgets: > > - **DNS Status** displays the number of DNS servers running and available for processing requests. > - **DNS Responses** displays the DNS responses according to the time period selected. This widget also displays the percentage of each type of a DNS response: Success, Failure, Referral, NXRRSET, or NXDomain. To filter data elements, click the legend and dynamically update the chart to display the data that is most critical to you. > - **DNS Queries per second** is a cumulative total of all DNS queries per second, averaged over all hosts available for an account. > - **Total DNS Queries** displays the total number of queries over time. > - **DHCP Status** displays the number of DHCP servers running and available for processing requests. > - **DHCP Leases per Second** displays the number of leases assigned, declined, and reclaimed per second, for the selected time period. > - **DHCP Leases** displays the total number of leases assigned, declined, and reclaimed, for the selected time period. > - **DHCP Messages** displays the **Acknowledged** and **Informs Requested** messages, for the selected time period. > > ## License Utilization Widgets > > > **Active IP Addresses** displays the active IP addresses according to the following parameters: > > - **Total** is the total number of unique IP addresses. An active IP address is one that has been assigned administratively, is seen in a new or renewed DHCP lease, or is seen as a source IP in a DNS query. > - **Static** is the total number of static IP addresses that are any of the following: > - assigned to a fixed address > - reserved > - assigned to an A record or a PTR record > - abandoned > - **DHCP Clients** is the total number of IP addresses in new and renewed DHCP leases. > - **DNS Clients** is the total number of source IP addresses found in DNS queries. > - **Total Infoblox Instances** is the total number of instances. An instance is a single host with DDI (DHCP and/or DNS) services enabled or a pair of hosts configured in co-located Active/Passive or Active/Active DHCP HA groups. For example, a single host counts as one instance; a pair of hosts in Active/Passive or Active/Active count as one instance; and a pair of hosts in Advanced Active/Passive count as two instances. A host can be in multiple Advanced Active/Passive groups but is counted as one instance in the total number of instances. > > > ⚠️ - DNS Queries is the total number of inbound queries received by all deployed DNS servers. > > ⚠️ - Active IPs are unique IPs that are administratively assigned in IPAM and observed from DHCP lease or DNS query operations. > > ⚠️ - Instances are deployed hosts with DNS, DHCP, or both enabled. A pair of DHCP HA devices are counted as a single instance. > > # Selecting a Refresh Rate for the Dashboard > > To specify a refresh rate for the page, select one of the following options under the **Refresh every** menu: > > - 1 minute > - 5 minutes > - 15 minutes > - 30 minutes > - 1 hour > - 8 hours > - 1 day > - Manually > > To refresh the page manually, click > Macro (inline-media-image) > > . > > # Selecting a Viewing Period for the Dashboard > > To specify a viewing period, click one of the following options under the **View last **menu: > > - 1 hour > - 24 hours > - 48 hours > - 7 days > - 1 month > - Custom: up to 31 days  > > To download a PDF copy of the Dashboard, click **Download as PDF**, located in the top left part of the page. > > > ⚠️ ### Note > > ⚠️ > > ⚠️ The Dashboard is available only for **Infoblox Threat Defense Business On-Premises**, **Infoblox Threat Defense Business Cloud**, **Infoblox Threat Defense Advanced**, and** Universal DDI **subscriptions. Universal DDI supports a viewing period of up to 24 hours.