Visualization and Dashboards

Visualize your data inside Panther, and using additional tools

Overview

Certain data visualizations are available directly within the Panther Console:

• Panther-managed Overview, Cloud Security, Data, and MITRE ATT&CK® visualizations on the Dashboards page

• A log ingestion dashboard on the Log Source Overview page

• Within Search results, a histogram and summary bar charts

If you'd like to build out more advanced dashboards and visualizations, you can connect your Panther data lake with common third-party data visualization tools: Snowsight and Tableau.

Support for further data visualization directly in the Panther Console is under consideration for future development.

Data visualizations in the Panther Console

You can see visualizations of your Panther data directly in the Console, within the dashboards and in the search histogram.

Panther-managed dashboards

Panther provides four built-in dashboards: Overview, Cloud Security, Data, and MITRE ATT&CK®. Learn more on Panther-Managed Dashboards.

Search histogram and summary bar charts

The results of queries ran in Search are displayed in a histogram. Viewing results as a function of time may help you identify spikes and trends. The bars of the histogram are clickable, which may be useful in iteratively narrowing your searches.

The field values of events returned from a Search are also summarized in bar charts. These visualizations can help provide quick insights into your data.

Learn more about the histogram and summary bar charts on Search.

Creating Panther dashboards in Snowsight

To create Panther dashboards in Snowsight, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.

Snowsight is Snowflake's web interface that supports visualizations and dashboarding.

Accessing Snowsight

To access Snowsight for your Panther security data lake in Snowflake:

1. Log in to the Snowflake environment for your account.

2. In the upper-right corner, click the Snowsight icon.
3. Click on Worksheets or Dashboards to begin creating visualizations. Create visualizations and add them to your Dashboard.

Building a Dashboard in Snowsight

You can build dashboards from all of the Panther databases and tables. To start building a Dashboard:

1. Navigate to Dashboards

2. In the upper-right corner, click + Dashboard.
3. Name the dashboard and click Create Dashboard.

4. Start adding dashboard tiles by clicking + New Tile. In Tiles you can write SQL to display points of interest!

   

Connecting Panther's Snowflake data lake to Tableau

To connect your data lake to Tableau, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.

To connect Panther to Tableau:

1. In Tableau, click New > Workbook.

2. On the Connect to Data modal, select Snowflake.

3. In the Snowflake authentication dropdown, select Username and Password.
4. Enter the Server, Username, and Password provided by your Panther support team and click Sign In.

You can build dashboards in Tableau from all of the Panther databases and tables.