Skip to main content

Page Functionality

This reference documents the pages of the Fluency web interface: what each page shows, and what each button, menu, and dialog does. The pages that follow cover the v2 interface, the portal served under /v2/ of a Fluency site (https://<name>.app.ingext.io/v2/), in the order of its navigation rail, so you can look one up by where it sits in the rail.

The classic v1 interface, served at the site's root, is documented in the last sub-section, Classic v1 interface, organized the way its menus are. Both interfaces sign in with the same account and work on the same site and the same data. They differ in layout and navigation; Finding a Page from the v1 Interface maps one onto the other.

How this section relates to the rest of the manual

This is the manual's user-interface reference layer. It describes each screen, button, and dialog as the product presents it. The task-oriented sections elsewhere in the manual (Data Collection, Platform, Search, Detections, Administration, and so on) explain why and how to do something. A page here links to the matching task guide where there is one.

The Navigation Rail​

Every page except the Admin console shares the same navigation rail down the left edge of the screen. The rail opens collapsed, as a column of icons. Hover over an icon to see its name. Expand menu, near the bottom of the rail, widens the rail to show each name beside its icon, and Collapse menu narrows it again.

v2 interface with the navigation rail expanded, listing Home through Configuration at the top and Admin console, Documentation, What’s new, Collapse menu, the signed-in account, and Sign out at the bottom

From top to bottom, the rail contains:

Rail itemPage
Fluency logoReturns to Home.
HomeHome: the landing dashboard after sign-in.
Overview SummaryOverview Summary: the account's behavior summaries, by severity and status.
Metric AlertsMetric Alerts: alerts raised by platform metrics, such as an import source that stopped sending.
Cases SearchCases Search: faceted search across case summaries.
Notable EventsNotable Events: faceted search across notable behavior events.
Datalake SearchDatalake Search: faceted search across all collected events.
KQL SearchKQL Search: KQL queries against the data lake, with their search history.
ResourcesResources: the users, applications, devices, and other entities that integrations have collected.
AssetsAssets: the assets registered or discovered from data ingress.
ApplicationsApplications: installed applications, each with its details, and the Application Catalog to install new ones from.
PlatformPlatform: a live diagram of the data pipeline's sources, routers, and sinks.
ReportsReports: the Event Ingress, Ticket Analysis, and Usage reports, and FPL report processors.
ConfigurationConfiguration: tenant configuration, from collectors and data lakes to processors and behavior rules.
Admin consoleAdmin console: users, API tokens, role-based access control, and audit and task logs. Shown only to users whose role gives access to the console; see Who Sees the Admin Console.
DocumentationOpens this manual.
What’s newOpens the What’s new dialog: the latest announcements, release notes, and detection coverage from Fluency, on the tabs Announcements, Release Notes, and Attack Coverage.
Expand menu / Collapse menuWidens or narrows the rail.
Account avatarThe signed-in user's initials, with their name and email when the rail is expanded. Opens Profile.
Sign outEnds the session.

What’s new dialog on its Announcements tab, listing dated announcements, each with a title, a summary, and a Read documentation link, above a Close button

Above the page, the top bar carries Fluency Portal, which also returns to Home.

Page Headers​

Each page opens with a header that contains:

  • A breadcrumb naming the area the page belongs to, such as Workspace / Home on the workspace pages or Admin · RBAC in the Admin console.
  • The page title.
  • A one-line description of what the page is for. Home shows today's date in its place, and Overview Summary, Metric Alerts and KQL Search have none.
  • The page's own buttons, on the right, such as Refresh or Add User.

A sub-page reached from another page shows a Back to … link in place of the breadcrumb, which returns to the page the sub-page belongs to: Back to Configuration, Back to Applications, Back to Catalog, Back to Reports, Back to KQL Search, Back to Search History, Back to Collectors, Back to Processors, and Back to Behavior Rules.

Addresses With No Page​

An address under /v2/ that matches no page opens Home rather than an error, so a mistyped or outdated link (/v2/datalake-search for Datalake Search, which lives at /v2/events) lands on Home. Two areas answer differently: an unknown /v2/configuration/<page> shows Page not found with This configuration page is unavailable., and an unknown /v2/admin/<page> shows Page not found. inside the Admin console.

Finding a Page from the v1 Interface​

Most v1 pages have a counterpart in the v2 interface, often at a different place in the navigation:

v1 pagev2 page
HomeHome
SIEM → Overview SummaryOverview Summary
SIEM → Behavior SummaryCases Search; one entity's case opens on Behavior Summary
SIEM → Behavior TimelineNotable Events
SIEM → ResourcesResources
SIEM → Behavior RulesConfiguration → Behavior Rules
SIEM → EntityInfo TablesConfiguration → Entity Tables
Data Lake → SearchDatalake Search
Data Lake → InvestigationsAdmin console → Investigation History
Data Lake → ManagementConfiguration → Data Lakes
Data Lake → SchemasConfiguration → Schemas
Data Lake → KQL Query BuilderKQL Search
Data Lake → KQL Search HistoryKQL Search → Search History
Platform → ApplicationsApplications and the Application Catalog; templates under Configuration → Application Templates
Platform → ConfigurationPlatform
Platform → Applications → View Integrations (Integrations)Configuration → Integrations
Platform → ProcessorsConfiguration → Processors
Platform → UsageReports → Usage Report
Platform → Assets → Assets SearchAssets
Platform → Assets → Metrics AlertsMetric Alerts
Platform → Administration → Collectors, Notifications, Resource Sync, Syslog PortsConfiguration → Collectors, Notifications, Resource Sync, Syslog Ports
Reports → Dashboard, ProcessorsReports
Reports → SchedulerConfiguration → Report Scheduler
Settings → UsersAdmin console → Users
Settings → PermissionsAdmin console → API Tokens, Roles, API Policies, Data Policies
Settings → AuditAdmin console → Audit Logs
Settings → Lake TasksAdmin console → Lake Tasks
Settings → ReportsAdmin console → Report Tasks
Settings → AWS RolesConfiguration → AWS Roles
ProfileProfile

Configuration → Search Facets has no page of its own in v1, where the facets are edited from Behavior Rules.

In this section​

note

The screenshots in this reference were captured from a demonstration instance. The data shown (event counts, rules, applications, and so on) will differ from your environment, but the page layout and controls are the same.