Links

Visualization and Dashboards

Visualize your data inside Panther, and using additional tools

Overview

Certain data visualizations are available directly within the Panther Console:
If you'd like to build out more advanced dashboards and visualizations, you can connect your Panther data lake with common third-party data visualization tools: Snowsight and Tableau.
Support for further data visualization directly in the Panther Console is under consideration for future development.

Data visualizations in the Panther Console

You can see visualizations of your Panther data directly in the Console, within the dashboards and in the search histogram.

Dashboards

There are three dashboards within the Panther Console Dashboard page: Overview, Health, and Data. Each of these displays Panther data in charts that encourage at-a-glance understanding.
The header says "Welcome, Panther user." Below are three tabs: Overview, Health, and Data. Overview is highlighted.

Overview dashboard

The Overview dashboard displays alert and log ingestion data, such as alert total over time by severity and volume of data ingestion by log source.
Learn more about the Overview dashboard on Panther Console Dashboard.

Health

The Health dashboard visualizes Cloud Security Scanning data, such as the number of cloud resources failing policy checks.

Data

The Data dashboard visualizes log ingestion and search data, such as the volume of events processed and volume of data queried.

Search histogram and summary bar charts

The results of queries ran in Search are displayed in a histogram. Viewing results as a function of time may help you identify spikes and trends. The bars of the histogram are clickable, which may be useful in iteratively narrowing your searches.
The field values of events returned from a Search are also summarized in bar charts. These visualizations can help provide quick insights into your data.
Learn more about the histogram and summary bar charts on Search.

Creating Panther dashboards in Snowsight

To create Panther dashboards in Snowsight, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
Snowsight is Snowflake's web interface that supports visualizations and dashboarding.

Accessing Snowsight

To access Snowsight for your Panther security data lake in Snowflake:
  1. 1.
    Log in to the Snowflake environment for your account.
  2. 2.
    In the upper-right corner, click the Snowsight icon.
    Snowsight icon within the Snowflake environment.
  3. 3.
    Click on Worksheets or Dashboards to begin creating visualizations. Create visualizations and add them to your Dashboard.

Building a Dashboard in Snowsight

You can build dashboards from all of the Panther databases and tables. To start building a Dashboard:
  1. 1.
    Navigate to Dashboards
  2. 2.
    In the upper-right corner, click + Dashboard.
    Creating dashboards within Snowflake.
  3. 3.
    Name the dashboard and click Create Dashboard.
  4. 4.
    Start adding dashboard tiles by clicking + New Tile. In Tiles you can write SQL to display points of interest!
    Example Panther dashboards in Snowsight

Connecting Panther's Snowflake data lake to Tableau

To connect your data lake to Tableau, you must have access to a Business Intelligence (BI) user in your Snowflake instance. To request a BI user, reach out to your Panther support team.
To connect Panther to Tableau:
  1. 1.
    In Tableau, click New > Workbook.
  2. 2.
    On the Connect to Data modal, select Snowflake.
  3. 3.
    In the Snowflake authentication dropdown, select Username and Password.
    Connecting Pather's Snowflake security data lake to Tableau.
  4. 4.
    Enter the Server, Username, and Password provided by your Panther support team and click Sign In.
You can build dashboards in Tableau from all of the Panther databases and tables.