Analytics Dashboard

This feature is currently available only to customers participating in our public preview. To access public preview features, see Public Preview Program.

Click Home from the left navigation, then Dashboards. Analytics Dashboardpresents multiple panes of information that provide at-a-glance data visuals of alerts over days, weeks, or months.

Interpreting Dashboard Analytics

Current Risk Score

The Current Risk Score displayed at the top of the page represents the risk across the platform based on the average risk of all users who have been assigned a risk score. Users that have no risk score assigned are not considered in the calculation.

Riskiest Accounts

This list reflects the top five users at highest risk in the Platform, along with their risk level. Click any user to view their account details. Refer to User Accounts and Groups.

Latest Alerts

This list shows the five latest alerts, their type, and severity. Severity is a system-defined value assigned to each individual alert type.

Click Latest Alerts in the title of the pane to access the Alerts page in the Threat Center.

Alerts Over Time

This graph provides administrators with a visual representation of the number of alerts created each day over the last 30 days. Individual plots are created for each alert level. Hover over any data point to view its alert total.

Activity

The following panes provide identification of deviations or spikes in activity. This activity reflects interaction with the system.

  • Most Active Users - the most active users in the platform, based on their activities in the last 60 days.

  • Most Active Secrets - the most active secrets are based on view activity for the secrets. The secret name only displays if the user has permissions to view the secret; otherwise, the ID is displayed.

  • Top User Agents - the most active agents, based on users sessions (activity time frame in the Platform).

  • Top Active IPs - the most active IPs, based on users sessions (activity time frame in the Platform). Click on any secret or IP listed to view its details page.