Performance dashboard

The Performance dashboard provides insight into system, search, and data model performance. It reports on the indexed event volume and ingestion rates (events per day), CPU load, time synchronization failures, and so on, to help administrators plan and maintain capacity.

Dashboard filters

Use the filters to refine which events are shown.

Filter by Description
Time range Select the time range to represent.
Business unit A group or department classification for the identity.
Category Filter based on the categories to which the malware belongs.
Destination Filter by the specific endpoint machine, host, or device targeted or reported on in an event.
Show only systems that should time sync Lets you include or exclude assets based on whether they are configured to require Network Time Protocol (NTP) synchronization.
System Filters by host-level configuration, performance statistics, and operational data.

Key metrics or key indicators

The following table describes the key indicators for this dashboard.

Key indicator Description
Uptime anomalies Tracks the servers and hosts that have not been rebooted in 30 days or more.

Dashboard panels

The following table describes the key indicators for this dashboard.

Panel Description
Top average CPU load by system Tracks the systems on the network with the highest average CPU load over the selected time range.
Time synchronization failures Tracks the assets that fail to synchronize their system clocks via Network Time Protocol (NTP).
Systems not syncing Tracks the hosts or assets that fail to synchronize their system clocks correctly via Network Time Protocol (NTP) or an equivalent time service.
Indexing time delay Tracks the data pipeline queue sizes and monitors indexing latency.