Incident analytics
Threat, severity, tenant and resolution statistics.
Threat, severity, tenant and resolution statistics.
This screen belongs to the Secure deployment operator, not an ordinary hosted customer. Hosted customers have a separate account page with their own keys and limits; policy and service settings are not exposed there. Contact the operator to change protection. In the operator console, open the route listed above; a report tenant filter does not automatically scope a global setting.
Examples use educational data. Use your own authorized tenant in real integrations. Each screenshot shows the actual frontend, with the source and educational/demo mode stated below it.
Step-by-step actions
- Open Incident analytics → 7 days → Refresh.
- Compare kinds, severities and tenants; open the relevant incident queue.
- For SLA, compare MTTA/MTTR with an incident change history.
- Repeat for 30 days to distinguish a spike from a persistent trend.
Every control and its meaning
| Control / parameter | Values, units and effect |
|---|---|
| Период / Period | 7 / 30 / 90 days selects incidents rather than audit retention. |
| Тип, severity, tenant | Breakdowns prioritize investigation; incident count differs from request/DLP-hit count. |
| MTTA / MTTR / SLA | Time to acknowledge/resolve and SLA compliance. Depends on recorded status changes. |
| False-positive trend | Share of incidents marked false positive by operators; not automatic classifier quality across all requests. |
Verify the result
Verify counts/durations using records from the same window. Closing an incident does not disable detection for future requests.
Errors, disabling and reverting changes
Empty analytics may mean no stored incidents. Check storage and timestamps; do not change thresholds merely to lower the chart.
2026-10-15 · Actual staging application. Non-personal settings or aggregate test-stand metrics, not real customer statistics or a benchmark. Operator profile and other tenant lists excluded. Protection settings were not changed.
- Period
- Incidents
Detailed security settings · Traffic analysis · FAQ · All application sections