Dashboard
The home dashboard is a current view of the selected account. It opens with the latest available alert statistics and combines operational activity with the work that needs attention.
What you can read
- Alert processing shows alerts received, handled by SIEM+, and cases created over the recent period.
- Threat hunt summary highlights notable detection and investigation activity.
- Recent reports links to available report files.
- Recent cases gives you a quick path to active investigation work.
Use the account selector to compare accounts. If a card has no data, check the selected account and the report or ingestion availability before treating it as an incident.
Export the executive report
The header’s Export Executive PDF Report action exports the latest executive score report for the selected account. It uses the current score data and may take a moment while the PDF is prepared. If no score snapshot is available, ask an administrator to check the score-report agent and report history.
Step-by-step: review the dashboard
- Confirm the selected account in the header.
- Review the latest alert statistics, then read Alert Processing to compare alerts received, alerts handled by SIEM+, and investigation cases created.
- Review the threat-hunt summary and recent activity cards.
- Select a recent case or report when you need to continue investigation or review a generated file.
- Select Export Executive PDF Report when you need a shareable executive snapshot, then wait for the download to finish.
- Refresh the page when scheduled ingestion or agent jobs have just run and you need a newer snapshot.
Dashboard refresh
Dashboard data comes from the application API and can change as scheduled ingestion and automated jobs run. Refresh the page when you need the latest snapshot.