Document toolboxDocument toolbox

Insights

Owned by Gary Leicht
Last updated: Sept 06, 2024
2 min read

The Insights tab reports allow you to discover insightful information about your environment including key reporting and/or analytical data. The Insights reports are modeled across multiple dimensions using qualitative entities (attributes) to measure data. Exported data is limited to 10,000 records.

The Insights tab features the following reports based on data collected from within your network:

  1. Top Indicators based on Threat Feed

The Top Indicators based on Threat Feed report displays the top ten, most active threat indicators correlated to the threat feed that contains the indicator. The following information can be found in the Top Indicators based on Threat Feed report: 

    • THREAT INDICATOR: The name of the threat indicator.
    • FEEDS: The name of the feed. 
    • EVENTS: The total number of hits.

       2. Top Threat Types

The Top Threat Types report displays the top ten, most active threat indicators found in current traffic correlated by threat type. The following information can be found in the Top Threat Types report: 

    • NAME: The threat property. 
    • EVENTS: The total number of hits.
    • ENDPOINTS: The number of unique devices. 

       3. Top Threats

The Top Threats report displays the top ten, most active threats found in current traffic, including total active endpoints attempting to connect to your network. The following information can be found in the Top Threats report: 

    • NAME: The threat property. 
    • EVENTS: The total number of hits.
    • ENDPOINTS: The total number of unique devices. 

Time and Date Filtering

For all of the reports, you can filter data by time and date. To do this, click Show located on the right-hand side of the page below the top Action bar. The time period displayed can be modified from 1 hour to 1 month, with 1 hour being the default time period. Optionally, by selecting Custom and choosing From and To values, a custom time period can be chosen. You can choose a different time frame from the Show drop-down menu. Show options include the following: 

  • 1 hour (default)
  • 24 hours
  • 48 hours
  • 7 days
  • 1 month
  • Custom

When Custom is selected, the following date/time filters appear, allowing further customization of the respective date and time:

  • From: When selected, a time dial and calendar appear. You can select the start time and date.
  • To: When selected, a time dial and calendar appear. You can select the start time and date.

Export Records

Click Export to download a CSV file of report records. The maximum number of exported Insights report records is 10,000.