Charts

Updated 3 hours ago by admin

The Insights page shows charts for the modules licensed on your account. You choose which charts appear, and you can click any part of a chart to open the matching detailed report.

In the console, click Insights in the left-hand menu.

Insights page

Chart controls

Each chart has controls in its title bar:

  • H, D, W, M: show the last hour, day, week or month.
  • - and +: decrease or increase the number of results shown (e.g. top 25).
  • Refresh data: reload the chart.
  • Maximise: show the chart full size.
  • Remove chart: remove it from the page.
  • Drag the handle on the left of the title to reorder the charts.

Adding and removing charts

Click Add Charts at the top right. In the Customise Charts panel, click a chart to add it to or remove it from the page. Use Filter charts to search. Click Reset to go back to the default set of charts.

Drilling down into a chart

Click a bar or slice of a chart to open the matching report (for example Web Activity or SaaS Activity) with the timespan and filters already set to that item. You can then change the filters, save the report or download it. See Activity Reports.

When you drill down from a Web Categories chart, the Web Category filter is set to the category you clicked. Use the Show Selected toggle in the filter to list only the selected categories.

Pie charts label each slice with its share of the total.

Pie chart on the Insights page

AI Observability and Unsanctioned SaaS

Two SaaS widgets give a quick view of AI and Shadow IT use. Add them from Add Charts (under Cloud Application Control). They are also shown on the console Dashboard.

  • Top Artificial Intelligence Apps (shown as AI Observability on the Dashboard): the AI applications in use.
  • Unsanctioned SaaS: the unsanctioned SaaS applications in use.

Each app is shown as a bubble sized by its amount of activity. Hover over a bubble to see the count, or click it to open SaaS Activity filtered to that app. These widgets offer D, W and M (last day, week or month) and show up to 100 results by default.

AI and Unsanctioned SaaS charts in the Customise Charts panel
AI Observability and Unsanctioned SaaS widgets

Insight Dashboards

An Insight Dashboard saves a set of charts with one interval and result limit, so you can reopen them together and download them as a single PDF.

Creating a dashboard
  1. On the Insights page, click + Dashboard.
  2. Enter a Name.
  3. Choose the Interval (Hour, Day, Week or Month) and the Result limit (for example 25).
  4. Click charts in the Charts list to add them. Use Filter charts to search. Under Selected charts, use the arrows or drag handle to change the order, and the cross to remove a chart.
  5. Click Save dashboard.
New Insight Dashboard dialog
Viewing a dashboard

Saved dashboards are listed under Insight Dashboards in the left-hand menu. Click one to open it. Click Download PDF to download all its charts as one PDF, or the bin icon to delete the dashboard. Click Back to Insights to return.

Insight Dashboard header with delete and Download PDF buttons
REVIEW (remove before launch): (1) the New Insight Dashboard dialog says a dashboard can be emailed as a PDF. The Scheduler only lists saved Web Activity and SaaS Activity reports (sent as CSV or Excel), so dashboards can't be scheduled there. Please confirm how a dashboard is emailed as a PDF. (2) The existing Last Month WS & CASB dashboard shows Chart 3 has unsupported saved settings, so I couldn't capture an open dashboard.

Available charts

Chart data is available for a maximum of 30 days regardless of the account log retention period.

The charts in the Customise Charts panel depend on the modules licensed on your account.

Web Security

Chart

Description

Top Allowed Domains

The top domains accessed, based on the number of hits across all users or devices

Top Allowed Users

The users that generated the most hits to allowed sites

Top Blocked Domains

The top domains blocked by rules, based on the number of hits

Top Blocked Malware by Domain

The domains where the most malware was blocked

Top Blocked Malware by Name

The most frequently blocked malware, by name

Top Blocked Mime Types by Domain

The domains with the most blocked file (MIME) types

Top Blocked Mime Types by Type

The most frequently blocked file (MIME) types

Top Blocked Users

The users blocked by rules most often, based on the number of hits

Top Custom URL Categories

The top Custom URL categories matched, based on the number of hits

Top Devices (IP)

The top device IPv4 addresses, based on the number of hits

Top Devices (MAC)

The top device MAC addresses, based on the number of hits

Top Device Types

The top device types (for example laptop or desktop), based on the number of hits

Top Domains

The top domains, allowed or blocked, based on the number of hits

Top Keyword Categories

The top Keyword categories matched, based on the number of hits

Top Operating Systems

The top operating systems, based on the number of hits

Top Users

The top users, based on the number of hits to allowed or blocked sites

Top Web Categories

The top Web categories, based on the number of hits

Web Browsing Activity

The number of final actions (allow, block, quota, warn, redirect) over time

Cloud Application Control

Chart

Description

Top Cloud Application Actions

The top actions carried out across all applications

Top Cloud Application Activity

The top applications used over time

Top Cloud Application Classes

The top classes of applications used

Top Cloud Application Locations

The top geographic locations accessed when using cloud applications

Top Cloud Application Names

The top applications used

Top Cloud Application Risks

The top high-risk actions

Top Cloud Application Risks (User)

The top high-risk actions, by username

Top Users of Cloud Applications

The top users of cloud applications from the SaaS Catalog

Top Artificial Intelligence Apps

AI application usage (AI Observability)

Unsanctioned SaaS

Unsanctioned SaaS application usage

Email Security

Chart

Description

Email Volume

The number of inbound and outbound messages over time

Inbound Email Activity

The number of inbound messages over time that were delivered, rejected, spam or virus

Top Email Actions

The top email actions triggered by inbound messages

Top Email Rules

The top rules triggered by inbound messages

Top Final Actions

The top final actions triggered by inbound messages

Top Final Rules

The top rules that triggered final actions on inbound messages

Top Recipients

The top recipients of inbound messages

Top Senders

The top senders, based on the number of messages sent

Top Spam Recipients

The top recipients of spam

Top Virus Recipients

The top recipients of messages containing a virus or malware

Cloud MFA

Chart

Description

Authentication Overview

Successful and failed authentication attempts over time

Failed Logins (Auth Client)

Failed authentication attempts by client type (for example RADIUS or AD FS)

Failed Logins (Country)

Failed authentication attempts by country

Successful Logins (Auth Client)

Successful authentication attempts by client type

Successful Logins (Country)

Successful authentication attempts by country

Success vs Failed Login Attempts

The number of successful and failed authentication attempts

Top Failed Logins (User)

Failed authentication attempts by user

Top Successful Logins (User)

Successful authentication attempts by user

These older charts have been retired: Top Domains/Users By Time Spent, the Extended Web Reports, Top Cloud Application Risks (IP/MAC), the API-mode charts and Top Successful Dispatch Policies Used.

How did we do?