Explore host, user, and network data

Elastic Security provides dedicated pages for exploring host, user, and network data within your environment. Each page offers key performance indicator (KPI) charts, interactive widgets, and data tables that let you view specific data, drill down for deeper insights, and investigate events using Timeline.

Use the following pages to explore your security data:

• Hosts: View host metrics, events, anomalies, risk scores, and sessions. Drill into host details for comprehensive information about individual hosts in your environment.
• Users: Review user authentication events, anomalies, and risk scores. Drill into user details to understand individual user activity and behavior.
• Network: Analyze network activity using an interactive map and data tables for events, flows, DNS queries, HTTP requests, and TLS handshakes.