# KPIs Dashboard

This dashboard efficiently <mark style="color:green;">compiles key performance indicators (KPIs)</mark>, focusing on engine performance and team productivity. Available for <mark style="color:green;">MSS and Company users,</mark> it offers <mark style="color:green;">date filters for detailed analysis</mark>.

<figure><img src="/files/KwGStBNa24jEMRzWa0s6" alt=""><figcaption><p>Overview KPI's Dashboard</p></figcaption></figure>

***

#### Average Time To Detect An Incident (MTTD)

The average time to identify an incident from the generation of the alert.&#x20;

***

#### Average Time To Respond To An Incident (MTTR)

A performance indicator of the security team measuring the time from the opening of the incident to the start of treatment.&#x20;

***

#### Average Time To Contain An Incident (MTTC)

The time it takes the team from identification to the start of the threat blocking phase.&#x20;

***

#### Average Time To Repair (MTTR)

The time required to fix the problems and eradicate the threat, returning the environment to a safe state.&#x20;

***

#### **SLA (Service Level Agreement)**

Displays the percentage of services delivered within the [<mark style="color:green;">contracted SLA</mark> ](/system-settings/managing-companies/configuring-the-companys-profile.md#sla)parameters.&#x20;

***

#### Workload Reduction

Shows the percentage of workload reduction, comparing alerts processed by the initial engine with generated incidents.&#x20;

***

#### Incident Response Procedure

Indicates the number of advanced playbooks registered in the system.

***

#### Procedure Compliance

Compares the total number of rules with those having associated advanced playbooks.&#x20;

***

<figure><img src="/files/GxT0VZEzwrM4gyqOWXwh" alt=""><figcaption><p>General Indicators</p></figcaption></figure>

***

#### Monitoring System

A column chart displays the total number of alerts generated by the solution (SIEM), with a line highlighting the proportional workload reduction.&#x20;

<figure><img src="/files/eVC1Cxt3B0mfJ0GTGsuQ" alt="" width="563"><figcaption></figcaption></figure>

***

#### Timeline

Automatically evaluates all incidents handled over a defined period (30 days or customized), indicating the average response time and related KPIs.&#x20;

<figure><img src="/files/RmhzFIrlg0yb3MnnkJ25" alt="" width="563"><figcaption></figcaption></figure>

***

#### Data Sources

Each column in the chart represents a data source, contrasting the total received alerts with those that are actually relevant.

<figure><img src="/files/Dx9YXlTysQN4iWRlzMXR" alt="" width="563"><figcaption></figcaption></figure>

***

[<mark style="color:green;">Confusion Matrix</mark>](/response/dashboards/alert-management-dashboard/confusion-matrix.md#confusion-matrix-indicators)

<figure><img src="/files/ijXAa1B5U1McLX3GbXos" alt=""><figcaption><p>Confusion Matrix</p></figcaption></figure>

***


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.inopli.com/response/dashboards/kpis-dashboard.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.