# Panther-Managed Dashboards

## Overview

There are four dashboards within the Panther Console **Dashboards** page:

* **Overview**: Displays alert and log ingestion data, such as alert total over time by severity and volume of data ingestion by log source.
  * Learn more below, in [Using the Overview dashboard](#using-the-overview-dashboard).
* **Cloud Security**: Visualizes [Cloud Security Scanning](https://docs.panther.com/cloud-scanning) data, such as the number of cloud resources failing policy checks.
* **Data**: Visualizes log ingestion data, such as the volume of events processed and data latency by log type.
* **MITRE ATT\&CK®**: Visualizes coverage against MITRE ATT\&CK® framework by mapping rules, policies and scheduled rules to reports.
  * Learn more on [Framework Mapping and MITRE ATT\&CK® Matrix](https://docs.panther.com/detections/report-mapping).

<figure><img src="https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-21cb94fea3e32195765a7774c6fbe0d693695069%2FScreenshot%202025-01-31%20at%208.24.26%E2%80%AFAM.png?alt=media" alt="In a navigation bar on the left, a &#x22;Dashboards&#x22; selection has been made. The top of the page says &#x22;Welcome, Panther user&#x22; above four tabs: Overview, Cloud Security, Data, and Overview Cloud Security Data MITRE ATT&#x26;CK®."><figcaption></figcaption></figure>

## Using the Overview dashboard

The Panther Console's overview dashboard lets you quickly identify trends and act on threats. The dashboard includes key alert metrics and actionable environment information. Above the dashboard widgets is a [Panther AI](https://docs.panther.com/ai) entry point where you can ask general security questions.

The Overview dashboard is the first page you'll see when you log in to the Panther Console. To access it from a different area of the Console, click **Dashboard** > **Overview** in the left sidebar menu.

<div align="center"><figure><img src="https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-5c74d6dbbe1324159cfc424ac952aa76aae6cd19%2FScreenshot%202023-02-03%20at%2012.22.13%20PM.png?alt=media" alt=""><figcaption></figcaption></figure></div>

Use the date range picker in the upper right corner of the page to set a time range for all charts in the dashboard. This filter defaults to showing the last week.

<figure><img src="https://4011785613-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LgdiSWdyJcXPahGi9Rs-2910905616%2Fuploads%2Fgit-blob-1ab4d37de635ed7c4c40bdce82cb8f16a83f79d4%2Fimage.png?alt=media" alt=""><figcaption></figcaption></figure>

Each chart contains clickable metrics and/or actions, which you can follow to dig deeper into an alert.

The tiles in the upper section of the overview dashboard, such as **Open Unassigned Alerts by Severity** and **Alerts by Severity and Status**, include information that your team may need to address urgently. Additional tiles contain information that can inform proactive investments in your Panther instance.

### **Open Unassigned Alerts by Severity**

This chart helps answer the question, "Am I under attack?"

* View a list of all open alerts that have not yet been assigned to a user, grouped by severity, within the specified time range.
* Click on a bar in the graph to see a list of the specific alerts at that severity level.
* Click on a severity level to filter it in and out of your chart view.
* Click **Triage Alerts** in the upper right corner to take further action.

{% embed url="<https://youtu.be/POxPDNgtrLE>" %}

### **Alerts by Severity and Status**

This table helps answer the question, "How severe is the attack?"

* View a list of all alerts, broken down by severity and status, within the specified time range.
* Click on numbers in the grid to see a list of the specific alerts at that severity level and status.
* This chart can help visualize how your team is working through alerts.

### **My Assigned Alerts**

This tile helps answer the question, "What have I been assigned to help mitigate the attack?"

* View a list of all alerts that have been assigned to you within the specified time range.

### **Alert Total Over Time By Severity**

This tile helps answer the questions, "When did the attack occur? Is it still happening?"

* View the total number of alerts over the specified time range, by severity.
* Click the severity levels on the left of the chart to filter them in and out.
* Use the slider at the bottom of the chart to alter the duration of time shown.
* **Current Period** is the time range designated by the date picker in the upper right corner of the page. **Previous Period** is the same duration of time, directly before the **Current Period**.

{% hint style="info" %}
This chart displays all [alerts](https://docs.panther.com/alerts), including alerts triggered by detection matches, [system errors](https://docs.panther.com/system-configuration/notifications/system-errors), and [detection errors](https://docs.panther.com/detections/rules#rule-errors-and-scheduled-rule-errors).
{% endhint %}

{% embed url="<https://youtu.be/oE-wy5z0epI>" %}

### **Alerts By Log Type**

This chart helps answer the question, "Where is the attack coming from?"

* View the log types associated with the most alerts, within the specified time range.

### **Alerts by Detection**

This chart helps answer the question, "Is this just noise?"

* View the detections triggering the most alerts, within the specified time range.
* This can help you determine which detections may need to be tuned to decrease unnecessary noise.

### **Ingestion by Log Source**

This chart helps answer the question, "Are my data sources functioning as expected?"

* View the amount of data your Panther account has ingested within the specified time range, by log source.
* Use the slider at the bottom of the chart to alter the duration of time shown.
* Click **Reset** to switch from **Logarithmic** to **Linear** view, and/or to reset the slider. Note that this button does *not* reset the selected **Interval** or overall date/time range.
