Trends & SLAs
The Trends & SLAs tab displays how a security program is meeting goals from an SLA perspective and provides trending data about findings in a security program. It allows the configuration of SLAs based on specific criteria and see visual data to determine if those criteria are being met.
The Trends and SLAs tab contains multiple containers:
- Mean Time to Close by Severity
- Trend of Findings Opened vs. Closed
- Service-Level Agreements (SLAs): every SLA that is enabled for that tenant
Admins can set up SLAs through the Admin Dashboard (Tenant Settings>Service-Level Agreements) or by clicking SLA Settings.
If no SLAs are enabled, a message will appear on the page:
When filters are selected, the data displayed refreshes, and the active filters are listed at the top of the page.
Search filters allow users to refine and narrow down their search results based on specific criteria or parameters.
Analytics filter values and data sets are updated every minute. If a tag or field was updated but did not appear as expected, wait one minute and try again.
A list of all filters and values exists below:
- Client
- Client Tags
- Date range
- Finding Severity
- Critical
- High
- Medium
- Low
- Informational
- Finding Tags
- Report
- Report Tags
- CVE ID
- CWE ID
This container shows the mean time to close findings by severity every month over the specified time range for findings matching the filter criteria.
This graph shows MTTR averages only findings that have been closed.
This container displays a bar graph showing the Monthly Trend Chart of Open vs. Closed Findings over the date period specified in the filter for findings that match the given filter criteria.
A trending blue line shows the total number of open findings. A green bar identifies the number of closed findings, while a red bar identifies the number of opened findings.
To make the graph easier to view, days with zero findings opened or closed are hidden.
These containers provide snapshots and visual representations of findings based on the business rules of enabled SLAs. based on the query parameters selected:
- 1.A total count for all findings that exceed, are nearing, or are within one day of the SLA.
- 2.A view of the mean time to remediate, plus any findings nearing one day of SLA, over a period of time.
- 3.A view of how many findings by percentage of overall findings exceeded SLA over a period of time.
Further details and the ability to directly edit any findings that apply to the SLA can be obtained by clicking on the appropriate box under "CURRENT SNAPSHOT".
Last modified 3mo ago