Analytics Dashboard

From Home, click Dashboards, then Analytics. The Analytics dashboard presents multiple panes of information that provide at-a-glance data visuals of alerts over days, weeks, or months.

Interpreting Dashboard Analytics

This section describes the various types of information that appear on the Analytics dashboard.

Current Risk Score

The Current Risk Score displayed at the top of the page represents the risk across the platform based on the average risk of all users who have been assigned a risk score. Users that have no risk score assigned are not considered in the calculation. Expand the Current Risk Score to see an overview of users by risk level over time.

Riskiest Accounts

This list reflects the top five users at highest risk in the Platform, along with their risk level. Click any user to view their account details. Refer to User Accounts and Groups.

Latest Alerts

This list shows the five latest alerts, their type, and severity. Severity is a system-defined value assigned to each individual alert type.

Click Latest Alerts in the title of the pane to View Alerts.

Alerts Over Time

This graph provides administrators with a visual representation of the number of alerts created each day over the last 30 days. Individual plots are created for each alert level. Hover over any data point to view its alert total.

Activity

The following panes provide identification of deviations or spikes in activity. This activity reflects interaction with the system.

  • Most Active Users - the most active users in the platform, based on their activities in the last 60 days.

  • Most Active Secrets - the most active secrets are based on view activity for the secrets. The secret name only displays if the user has permissions to view the secret; otherwise, the ID is displayed.

  • Top User Agents - the most active agents, based on users' sessions (activity time frame in the Platform).

  • Top Active IPs - the most active IPs, based on users' sessions (activity time frame in the Platform). Click on any secret or IP listed to view its details page.