Kaspersky Anti Targeted Attack Platform

About widgets and layouts

You can use widgets to monitor application operation.

A layout is the appearance of the workspace of the application web interface window in the Dashboard section. You can add, delete, and move widgets in the layout.

The following widgets are available in the application:

• Administration:
  • Sandbox processing time. Displays how long it took on average for objects to be scanned by Sandbox.
  • Processed. Displays the processing state for traffic coming from Sensors and Endpoint Agents to the Central Node.
  • Queues. Displays information on the number and volume of objects waiting to be scanned by application modules and components.

  If you are using the

  distributed solution

  

  Two-level hierarchy of servers with Central Node components installed. This hierarchy allocates a primary control server (Primary Central Node (PCN)) and secondary servers (Secondary Central Nodes (SCN)).

  and
  multitenancy mode

  

  Operation mode in which Kaspersky Anti Targeted Attack Platform is used to protect the infrastructure of multiple organizations or branch offices of the same organization simultaneously.

  , the section displays information about the tenant and server that you chose.

• NDR:
  • Custom widget. Widget with arbitrary static content. For example, you can use custom widgets to logically separate groups of widgets in the Dashboard section.
  • Traffic. Rate of incoming traffic. The widget can display information for all monitoring points of all nodes with installed application components, for monitoring points of a selected node, or for an individual monitoring point.
  • CPU usage. CPU load on the selected node that has an application component installed.
  • RAM usage. Amount of physical RAM being used on the selected node that has an application component installed.
  • NDR health. Information about the current state of application performance. This widget can display the following values:
    • OK—No messages regarding performance issues, or all performance issues have been resolved.
    • Non-critical malfunction—Non-critical malfunctions reported. This value is displayed until the performance problem is resolved.
    • Operation disrupted—Disruptions of the application reported. This value is displayed until the performance problem is resolved.
    • Maintenance mode—The application is running in maintenance mode.
  • Storage—Information about the drive in the local file system on the selected node with the application component installed. In this widget, you can select the following information to be displayed:
    • Disk usage—Percentage of time taken to process data read/write operations.
    • Occupied on disk—Filled disk space.
    • Read from disk—Rate of reading data from the disk.
    • Write to disk—Rate of writing data to the disk.
  • Traffic processing latency. The current latency while processing traffic, counting from the moment it arrives at the monitoring point of the node. The maximum latency from among all enabled monitoring points is displayed. The widget can display information for all monitoring points of all nodes with installed application components, for monitoring points of a selected node.
  • Status of protection functions. General information about the current state of protection functions in the application. This widget can display the following values:
    • All are enabled—All technologies and methods intended for continuous use are enabled, and all created monitoring points are enabled.
    • Not all are enabled—Some protection functions are disabled or are enabled in learning mode, or not all monitoring points are enabled.
  • Uptime. Uptime of Kaspersky Anti Targeted Attack Platform. In this widget, you can select the following information to be displayed:
    • Effective uptime—Duration of normal operation of the application (without malfunctions) since the most recent launch up to the current moment.
    • Total uptime—Time from the first launch of the application up to the current moment. Includes periods of normal operation of the application and periods of malfunctioning.
    • Since first start of application—The total time elapsed from the first launch of the application up to the current moment. Includes periods of normal operation, periods of malfunctioning, and periods of inoperability.

  Widgets employ various means of drawing attention, depending on the incoming information. For example, widgets with information about the application and hardware resources can automatically change color if the information requires attention (in particular, when the load on a hardware resource is close to critical).

  Widgets display only basic information that changes dynamically. If you need to view detailed information, you can navigate from the Dashboard section to other sections of the application web interface. You can navigate the web interface by clicking widgets.

  For correct information to be displayed in NDR widgets, you must configure the synchronization of date and time between Central Node and Sensor components.