Business Service Dashboard

In FortiSIEM, you can define a Business Service as a container of Devices (Go to CMDB > Business Services, then click New). A Business Service Dashboard provides an overview of the health of the business service by showing the related Incidents and impacted devices.

Creating a Business Service Dashboard

When you create a new dashboard, choose Business Service Dashboard as Type.

Data Source

The only source of data for this dashboard is incidents triggering for the devices belonging to a Business Service.

Adding/Removing Business Services to the Dashboard

When you create a Business Service Dashboard for the first time, no Business Services are shown.

Complete these steps to add a Business Service to the dashboard:

  1. Click the devices icon.
  2. Select the Business Services from the Available Services Business Service list.
  3. Click right arrow to move them to the Selected Services list.
  4. Click Save.

Complete these steps to remove a Business Service from the dashboard:

  1. Click the devices icon.
  2. Select the Business Services to remove from the Selected Services list.
  3. Click left arrow to move them back to the Available Services list.
  4. Click Save.

Summary View

Business Service Dashboard has two views: Summary view and Drilldown view. The Summary view is the default view when you access the Dashboard.

The first level Summary view displays:

  • Incident Counts By Severity and Top Impacted Devices across all Business Services.
  • High and Medium Severity Incident Counts for each Business Service.

Click a specific Business Service in the first level to see the second level Summary view. This displays:

  • Devices belonging to the Business Service that has triggered incidents.
  • For each device:
    • Device Name
    • Device Type
    • Availability Status
    • Incidents and counts – you can click an Incident to see more details in a pop up. From there, you can take action on an incident (for example, drill down the incident on Incident page).

Drilldown View

Click the Drilldown button to display the Drilldown view of Business Services.

The first level Drilldown view displays the Incidents of each Business Service.

Click a specific Business Service in the first level to display the second level Drilldown view. It displays the Summary dashboard view of each device belonging to the selected Business Service.

Click the Overview button to get back to the Summary view.

Filtering Summary View

In the first level Summary view, you can filter the information displayed by Incident Severity and Organizations (for Service Provider deployments). Choose the values from the respective drop-down lists.

In the second level Summary view, you can filter the information by Device name and type.

Filtering Drilldown View

In the first level Drilldown view, you can filter the information by Organizations (for Service Provider deployments). Simply choose the values from the drop-down list.

In the second level Drilldown view, you can filter the information by Device name and type.

Changing Refresh Interval

Select the refresh interval from the drop-down menu on top-right.

Forcing a Refresh

To update the whole dashboard, select Refresh Now on top-right.