Group Metrics

Group Metric widgets display key performance metrics for multiple asset groups.

Adding a Group Metric Widget to a Custom Dashboard

When you first add a Group Metric widget to a custom dashboard, the widget will display its configuration menu. One metric and one group will already be selected. You can change the title, the metric, and the groups that the widget displays.

Group Metrics - Group Metric Widget Configuration-1

By default, Group Metrics display the top 8 groups according to a specific pattern. For example, the widget may show the groups with the lowest or highest RS³ scores. As the conditions on your client change, the widget may load with different groups.

You can alternately choose a static selection of groups for the widget to show every time it loads.

Once you have configured the widget, click Save. The widget will show the metric for the selected groups.

Group Metrics - Configured Widget-1

Modifying Existing Widgets

You can modify the widget settings at any time by accessing the widget configuration menu. The widget configuration menu will be available if you have created the custom dashboard or if you have the privileges to modify any Shared dashboard.

If you are editing a custom dashboard, you must save the entire dashboard before your changes take effect.

Limitations

  • The dashboard filters Network, Group, and Tag have no impact on Group Metric widgets. If you apply one or more dashboard filters to a custom dashboard, the widgets will continue to show the same data for each group.

  • Some widgets show how metrics change over time. Others show the current state of a group. You may see different metrics available in each widget.

  • Some metrics will not be clickable. In a table, the metric will be blue to indicate a link.

  • You can only save the widget configuration if you have added at least one metric and one group. You must also provide a title.

Widgets

This section discusses available Group Metric widgets that provide access to all KPIs. The SLA Overview dashboard also has several group metrics widgets that provide access to SLA KPIs and other features. For more information, visit the Knowledge Base article on the SLA Overview dashboard.

Group Performance over Time

This widget allows you to compare how a single metric has changed over time. You can see the same metric for up to 10 groups. Additionally, you can modify the number of weeks or months to display through the configuration menu by changing the number of data points. Note that the amount of historical information available varies for each metric.

Weekly time series begin on the first Sunday before the Start Date. Each week begins on Sunday and ends on Saturday. Monthly time series begin on the first day of the same month as the Start Date.

Group Metrics - Group Performance Over Time Widget

Metric Comparison across Groups

This widget shows a single metric for up to 10 groups. The widget captures the current state of each selected group.

Group Metrics - Metric Comparison Across Groups Widget

Current Group Performance

This widget shows multiple metrics for multiple groups. Each metric available captures the current state of a Group. Use the search bar to limit the metrics visible within the table.

Select metrics and groups through the widget’s configuration menu. Dashboard filters have no impact on this widget.

Group Metrics - Current Group Performance Widget

List of Group Metrics

This section provides the list of metrics available in Group Metric widgets.

Metrics based on Current Data

Metric Description
Open Host Findings The number of host findings with the “Open” status.
Open App Findings The number of application findings with the “Open” status.
Open Critical VRR Host Findings The number of open host findings with a Critical VRR.
Open Critical VRR App Findings The number of open application findings with a Critical VRR.
Open High VRR Host Findings The number of open host findings with a High VRR.
Open High VRR App Findings The number of open application findings with a High VRR.
Open Weaponized Host Findings The number of open host findings associated with one or more threats.
Open Weaponized App Findings The number of open application findings associated with one or more threats.
Closed Host Findings The number of host findings with the “Closed” status.
Closed App Findings The number of application findings with the “Closed” status.
Total Host Findings The total number of host findings.
Total App Findings The total number of application findings.
Weaponized Hosts The number of hosts with open weaponized findings.
Weaponized Apps The number of applications with open weaponized findings.
Total Assets The sum of the count of hosts and the count of applications.
Hosts with Open Findings The number of hosts with at least one open finding.
Apps with Open Findings The number of applications with at least one open finding.
Fixes The number of patches available for open findings.
Group RS³ The RiskSense Security Score (RS³) for the group, as displayed on the Groups page.
Open Ransomware Host Findings The number of open host findings associated with ransomware
Open Ransomware App Findings The number of open application findings associated with ransomware
Open Trending Host Findings The number of open host findings associated with currently trending vulnerabilities or threats
Open Trending App Findings The number of open app findings associated with currently trending vulnerabilities or threats.
Open RCE/PE Host Findings The number of open host findings associated with Remote Code Execution or Privilege Escalation exploits.
Open RCE/PE App Findings The number of open app findings associated with Remote Code Execution or Privilege Escalation exploits.

Time Series

Metric Description
Open Host Findings The number of host findings with the “Open” status
Open App Findings The number of application findings with the “Open” status
Open Critical VRR App Findings The number of open application findings with a Critical VRR.
Open Weaponized Host Findings The number of open host findings associated with one or more threats.
Open Weaponized App Findings The number of open application findings associated with one or more threats.
Closed Host Findings The number of host findings with the “Closed” status
Closed App Findings The number of application findings with the “Closed” status
Weaponized Apps The number of applications with open weaponized findings.
Hosts with Open Findings The number of hosts with at least one open finding
Apps with Open Findings The number of applications with at least one open finding
App Findings Resolved - All The number of application findings closed within a specific time frame.
Critical VRR Host Findings Resolved - All The number of Critical host findings closed within a specific time frame.
Critical VRR App Findings Resolved - All The number of Critical application findings closed within a specific time frame.
Weaponized Host Findings Resolved - All The number of weaponized host findings closed within a specific time frame.
Weaponized App Findings
Resolved - All
The number of weaponized application findings closed within a specific time frame.
No. of Overdue Findings The number of open findings that should have been closed in each time frame, based on the SLAs governing those findings.
No. of Overdue Critical Findings (Severity) The number of open Critical findings that should have been closed in each time frame, based on the SLAs governing those findings.
No. of Overdue Critical Findings (VRR) The number of open Critical findings that should have been closed in each time frame, based on the SLAs governing those findings.
No. of Overdue Weaponized Findings The number of open findings associated with threats that should have been closed in each time frame, based on the SLAs governing those findings.
No. of Closed Findings that Met SLA The number of findings that were closed within a specific time frame and Met SLA (closed before they were due).
No. of Closed Findings Missed SLA The number of findings that were closed within a specific time frame and Missed SLA (closed after they were due).