Views User Documentation

Purpose	To gain insights into the Views app within the Raven Portal and learn how to utilize it effectively, please refer to the following documentation. It will provide you with the necessary information to understand what Views are and how to navigate them.

Created	October 17 2023

---

Understanding Views

Views provide an insightful way to access and organize Topics within your team. When you select a particular Topic, you gain access to a chronological record of events related to that Topic. Each event is presented with two distinct sections. The first section offers details about the event, including metadata, timestamp, agent, cloud, ECS, host, input, log, and message. In the second section, you can explore the event data presented in JSON format.

The topics you can choose from are essentially bricks within the Flow app.

While examining an event, you have the option to click on specific elements such as "beat," "type," or "host name." This action allows you to create a structured table displaying that specific information across all events associated with the chosen topic. This comprehensive view of events and data can be highly valuable for understanding and analyzing the topic's history.

Please note that, for the time being, the Views app is exclusively for internal use and is not accessible to external clients.