Visualization and Dashboards

Visualize your data inside Panther, and using additional tools


Certain data visualizations are available directly within the Panther Console: three dashboards, as well as a histogram to display the results of Query Builder and Indicator Search queries.
If you'd like to build out more advanced dashboards and visualizations, you can connect your Panther data lake with common third-party data visualization tools: Snowsight and Tableau.
Support for further data visualization directly in the Panther Console is under consideration for future development.

Data visualizations in the Panther Console

You can see visualizations of your Panther data directly in the Console, within the dashboards and in the search histogram.


There are three dashboards in the Panther Console: Overview, Health, and Data. Each of these displays Panther data in charts that encourage at-a-glance understanding.
The header says "Welcome, Panther user." Below are three tabs: Overview, Health, and Data. Overview is highlighted.

Overview dashboard

The Overview dashboard displays alert and log ingestion data, such as alert total over time by severity and volume of data ingestion by log source.
Learn more about the Overview dashboard on Panther Console Dashboard.


The Health dashboard visualizes Cloud Security Scanning data, such as the number of cloud resources failing policy checks.


The Data dashboard visualizes log ingestion and search data, such as the volume of events processed and volume of data queried.

Search histogram

The results of queries ran in Query Builder and Indicator Search are displayed in a histogram. Viewing results as a function of time may help you identify spikes and trends. The bars of the histogram are clickable, which may be useful in iteratively narrowing your searches.
Learn more about the histogram on Query Builder and Indicator Search.

Creating Panther dashboards in Snowsight

To create Panther dashboards in Snowsight, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
Snowsight is Snowflake's web interface that supports visualizations and dashboarding.

Accessing Snowsight

To access Snowsight for your Panther security data lake in Snowflake:
  1. 1.
    Log in to the Snowflake environment for your account.
  2. 2.
    In the upper-right corner, click the Snowsight icon.
    Snowsight icon within the Snowflake environment.
  3. 3.
    Click on Worksheets or Dashboards to begin creating visualizations. Create visualizations and add them to your Dashboard.

Building a Dashboard in Snowsight

You can build dashboards from all of the Panther databases and tables. To start building a Dashboard:
  1. 1.
    Navigate to Dashboards
  2. 2.
    In the upper-right corner, click + Dashboard.
    Creating dashboards within Snowflake.
  3. 3.
    Name the dashboard and click Create Dashboard.
  4. 4.
    Start adding dashboard tiles by clicking + New Tile. In Tiles you can write SQL to display points of interest!
    Example Panther dashboards in Snowsight

Connecting Panther's Snowflake data lake to Tableau

To connect your data lake to Tableau, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
To connect Panther to Tableau:
  1. 1.
    In Tableau, click New > Workbook.
  2. 2.
    On the Connect to Data modal, select Snowflake.
  3. 3.
    In the Snowflake authentication dropdown, select Username and Password.
    Connecting Pather's Snowflake security data lake to Tableau.
  4. 4.
    Enter the Server, Username, and Password provided by your Panther support team and click Sign In.
You can build dashboards in Tableau from all of the Panther databases and tables.