Analytics

The Analytics page provides system-wide statistics and metrics to help you monitor your team's workload, track trends, and measure response performance.

Key Performance Indicators

Six KPI cards are displayed at the top of the Analytics page, giving you an at-a-glance summary of the most important metrics:

  • Total Cases - The number of cases created within the selected date range.
  • Evidence - The total number of evidence items collected across all cases in the selected period.
  • Cases Closed - The number of cases that were resolved and closed during the selected period.
  • MTTR - Mean Time To Resolve, expressed as the average number of days from case creation to closure for cases closed in the selected period.
  • Total Users - The total number of active user accounts currently registered in the system.
  • Active Users - The number of users who performed at least one action during the selected period.

Charts and Visualizations

Below the KPI cards, a set of charts provides visual breakdowns of your case data across several dimensions:

  • Cases by Mode - A donut chart showing the split between Investigation and Incident cases. This helps you understand the balance of proactive investigations versus reactive incident responses.
  • Cases by Severity - A bar chart showing the distribution of cases across severity levels: Critical, High, Medium, Low, and Info. Use this to identify whether your team is handling an unusually high volume of critical cases.
  • Cases by Status - A donut chart showing the proportion of cases that are Open, Closed, or Archived. This gives a quick sense of how much active work remains.
  • Cases Over Time - A line chart showing case creation trends over the selected period, with separate lines for Incidents and Investigations. This is useful for spotting spikes in case volume or seasonal patterns.
  • Evidence Over Time - A line chart showing the volume of evidence items collected over time. Tracking evidence collection helps you understand workload intensity and resource needs.

Date Range Filter

Use the date range picker in the top-right corner of the Analytics page to filter the entire view to a specific time period. By default, the Analytics page displays data for the last 30 days.

When you change the date range, all KPI cards and charts update immediately to reflect only the data within the selected period. This allows you to compare performance across different time windows, such as month-over-month or quarter-over-quarter.

Analytics data is computed from your case data in real-time. There is no separate analytics database. Statistics are scoped to cases the current user has access to, unless the user has the view_statistics permission which provides system-wide metrics.