Threat Handling Statistics

Context

The system can collect statistics on alarm events, including alarm statistics, threat handling statistics, handling result statistics, security operations mean time to repair (MTTR) statistics, time consumption statistics of each phase, and operations time statistics. The system periodically collects data and displays related data in real time to help operations personnel to obtain trends of alarm events and formulate security policies in a timely manner, thus improving the operations efficiency.

The threat handling model collects statistics on alarm events from multiple aspects such as quantity, percentage, and accuracy.

Procedure

1. Log in to the operations platform using an operations account. Choose Service Operations > Security Services > Threat Handling Statistics.
2. View trend statistics and handling model statistics.
   • View statistics on various types of trends. By default, the time span is 24 hours, and data is collected every 5 minutes. If you manually change the statistical date and the time span exceeds 24 hours, data is collected every 24 hours.
     Figure 1 Trend statistics
     
   • View handling model statistics.
     Figure 2 Handling model statistics