Security metrics

Monitor over 50 different Security Metrics to identify potential security threats or insecure behaviors. Set thresholds for email notifications, visualize, and analyze the data in multiple ways. Export the data, or create dashboards with the metrics that are most important to your organization.

Access Security Metrics within Security Center by selecting Security Monitoring in the tools section. Then, select the Security metrics card.

All Security Metrics dashboard

View metrics such as failed logins, exports, impersonations, and more using this dashboard. The cards above the list provide a count of the metrics that match specific criteria listed on the card. Select any of these cards to filter the list to show only those metrics that match the criteria.

Select the +Create task button to create a Security Task related to a metric. For details on Security Tasks, see Security Tasks.

My metrics dashboard

This is a customizable dashboard that displays information about metrics you care about most. Select Edit to customize your dashboard by adding visualizations, filters, headings, images, rich text, and lists. To learn about the various ways you can customize your dashboard, see Dashboards in Platform Analytics.

Metrics navigation pane

The navigation pane on the edge of the screen displays your instance metrics. Select All Security Metrics to view all metrics in a single list. Select any of the items under All Security Metrics the entry to browse the metrics organized by category.

Each category displays a dashboard similar to the security My metrics dashboard, with cards for the metrics in that category.

• Customize the My security metrics dashboard
  Discover the flexibility of the My security metrics dashboard, which can be customized with metrics from various sources like graphs and charts. Tailor the dashboard to suit your organization's specific requirements.
• Configure Security Metrics to send email when thresholds are triggered
  Learn how to configure Security Metrics so that your instance generates an email notification when a threshold is triggered.
• All Security Metrics
  Navigate to All Security Metrics to view a table with the data related to the Security Metrics of your instance.
• Active Sessions
  View the trend line of the active users on the ServiceNow AI Platform.
• Adaptive authentication Security Metrics
  Use authentication policies to evaluate authentication requests and deny or allow access to your instance based on the specified policy conditions.
• Antivirus
  Displays the trend of when events occur on potentially infected files. See when they are discovered, placed into quarantine, restored, or deleted.
• Authentication
  View trends for metrics related to authentication schemes, such as Multi-Factor Authentication(MFA) use, web service accounts, and biometric scanner usage.
• Data Classification
  Access the Security Metrics for data classification on your ServiceNow instance.
• Authentication metrics
  View metrics related to authentication on your instance from a dashboard.
• Email
  Displays data related to spam emails that are being received externally.
• Export
  Discover the data that is commonly exported, and which users do the exporting.
• Integration Accounts
  View the trends about the integration accounts that are created on the ServiceNow AI Platform.
• Privileged Identity
  Analyze data related to metrics for users with privileged identity.
• Privileged Users
  View the trend line for the privileged users (active and inactive) and their activity on the ServiceNow AI Platform.
• Session management
  View metrics related to user sessions and the frequency of lockouts of the sessions.
• Users
  View the trend line for total users (active and inactive) and their activity on the ServiceNow AI Platform.

Parent Topic:Security monitoring console