---
title: Hosts page
description: The Hosts page provides a comprehensive overview of all hosts and host-related security events. Key performance indicator (KPI) charts, data tables, and...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/explore/hosts-page
products:
  - Elastic Cloud Serverless
  - Elastic Security
---

# Hosts page
The Hosts page provides a comprehensive overview of all hosts and host-related security events. Key performance indicator (KPI) charts, data tables, and interactive widgets let you view specific data, drill down for deeper insights, and interact with Timeline for further investigation.
![Hosts page](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/images/security-hosts-ov-pg.png)

The Hosts page has the following sections:

## Host KPI (key performance indicator) charts

KPI charts show metrics for hosts and unique IPs within the time range specified in the date picker. This data is visualized using linear or bar graphs.
<tip>
  Hover inside a KPI chart to display the actions menu (**…**), where you can perform these actions: inspect, open in Lens, and add to a new or existing case.
</tip>


## Data tables

Beneath the KPI charts are data tables, categorized by individual tabs, which are useful for viewing and investigating specific types of data. Select the relevant tab to view the following data:
- **Events**: All host events. To display alerts received from external monitoring tools, scroll down to the Events table and select **Show only external alerts** on the right.
- **All hosts**: High-level host details.
- **Uncommon processes**: Uncommon processes running on hosts.
- **Anomalies**: Anomalies discovered by [machine learning jobs](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/advanced-entity-analytics/anomaly-detection).
- **Host risk**: The latest recorded host risk score for each host, and its host risk classification. In Elastic Stack, this feature requires a [Platinum subscription](https://www.elastic.co/pricing) or higher. In serverless, this feature requires the Security Analytics Complete [project feature tier](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/deploy-manage/deploy/elastic-cloud/project-settings). Click **Enable** on the **Host risk** tab to get started. To learn more, refer to our [entity risk scoring documentation](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/advanced-entity-analytics/entity-risk-scoring).
- **Sessions**: Linux process events that you can open in [Session View](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/investigate/session-view), an investigation tool that allows you to examine Linux process data at a hierarchal level.

The tables within the **Events** and **Sessions** tabs include inline actions and several customization options. To learn more about what you can do with the data in these tables, refer to [*Manage detection alerts*](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/detect-and-alert/manage-detection-alerts).
![Events table](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/images/security-events-table.png)


## Host details page

A host’s details page displays all relevant information for the selected host. To view a host’s details page, click its **Host name** link in the **All hosts** table.
The host details page includes the following sections:
- **Asset Criticality**: This section displays the host’s current [asset criticality level](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/security/advanced-entity-analytics/asset-criticality).
- **Summary**: Details such as the host ID, when the host was first and last seen, the associated IP addresses, and associated operating system. If the host risk score feature is enabled, this section also displays host risk score data.
- **Alert metrics**: The total number of alerts by severity, rule, and status (`Open`, `Acknowledged`, or `Closed`).
- **Data tables**: The same data tables as on the main Hosts page, except with values for the selected host instead of all hosts.

![Host's details page](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4236/solutions/images/security-hosts-detail-pg.png)