Visualization and Dashboards
Visualize your data inside Panther, and using additional tools
Last updated
Visualize your data inside Panther, and using additional tools
Last updated
Certain data visualizations are available directly within the Panther Console:
Overview, health, and data dashboards on the Dashboard page
A log ingestion dashboard on the Log Source Overview page
Within Search results, a histogram and summary bar charts
If you'd like to build out more advanced dashboards and visualizations, you can connect your Panther data lake with common third-party data visualization tools: Snowsight and Tableau.
Support for further data visualization directly in the Panther Console is under consideration for future development.
You can see visualizations of your Panther data directly in the Console, within the dashboards and in the search histogram.
There are three dashboards within the Panther Console Dashboard page: Overview, Health, and Data. Each of these displays Panther data in charts that encourage at-a-glance understanding.
The Overview dashboard displays alert and log ingestion data, such as alert total over time by severity and volume of data ingestion by log source.
Learn more about the Overview dashboard on Panther Console Dashboard.
The Health dashboard visualizes Cloud Security Scanning data, such as the number of cloud resources failing policy checks.
The Data dashboard visualizes log ingestion and search data, such as the volume of events processed and volume of data queried.
The results of queries ran in Search are displayed in a histogram. Viewing results as a function of time may help you identify spikes and trends. The bars of the histogram are clickable, which may be useful in iteratively narrowing your searches.
The field values of events returned from a Search are also summarized in bar charts. These visualizations can help provide quick insights into your data.
Learn more about the histogram and summary bar charts on Search.
To create Panther dashboards in Snowsight, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
Snowsight is Snowflake's web interface that supports visualizations and dashboarding.
To access Snowsight for your Panther security data lake in Snowflake:
Log in to the Snowflake environment for your account.
Click on Worksheets or Dashboards to begin creating visualizations. Create visualizations and add them to your Dashboard.
You can build dashboards from all of the Panther databases and tables. To start building a Dashboard:
Navigate to Dashboards
Name the dashboard and click Create Dashboard.
Start adding dashboard tiles by clicking + New Tile. In Tiles you can write SQL to display points of interest!
To connect your data lake to Tableau, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
To connect Panther to Tableau:
In Tableau, click New > Workbook.
On the Connect to Data modal, select Snowflake.
Enter the Server, Username, and Password provided by your Panther support team and click Sign In.
You can build dashboards in Tableau from all of the Panther databases and tables.
In the upper-right corner, click the Snowsight icon.
In the upper-right corner, click + Dashboard.
In the Snowflake authentication dropdown, select Username and Password.
