Dashboard and events

Dashboard

The dashboard is the morning glance: fleet counters (hosts, sites, open incidents), fleet availability over the year, what is busy right now, the radar of firing and recently changed signals, the slowest APM sites, a needs-attention list with inline acknowledge and resolve, a compact cost-and-waste card (fed by Reports), and the live event feed. Blocks you have no data or no plan axis for simply do not render.

On a workspace with zero hosts the dashboard turns into onboarding: your team key and the per-OS install commands, polling until the first heartbeat arrives. See Adding a host.

Events

The Events module is the raw feed behind the stories: host up and down, agent updates, discovery changes, deploys and their before-and-after audits, integrity changes, anomalies, insights, APM lifecycle, traps. Tabs slice it by category (anomalies, security, APM, availability, network), a host filter narrows it to one box, and the year strip pins any day. Repeated telemetry events fold into one row with a count, so a chatty day still reads.

Every event row is human text with a timestamp in your timezone, and rows link into the relevant page (the host pinned to that moment, the incident, the trace) where a deeper story exists.