Skip to main content

All Metrics

All Metrics reports every metric Insights collects for the selected device group, with your rank against other FireMon customers beside each one. It is also where you choose which metrics appear on your KPI page, and in what order.

What each metric reports

Its current value, your percentile against other FireMon customers, and the change across the trend range as a percentage. The change is colored against the metric's ideal direction, and left uncolored where the metric has none.

Three things about those numbers are worth knowing:

  • Values come from the last daily collection, so they can be up to 24 hours old.
  • Widening the trend range moves the comparison point further back. It does not accumulate more change into the figure.
  • The percentile ignores the trend range entirely. It is fixed to a 30-day window, and only compares like with like at the all-devices level. Benchmarking covers why, and what a missing percentile means.

Your KPI selection and order are stored against your user account rather than your browser, and apply across every device group. Sorting this table to find your worst numbers is separate, and does not rearrange your KPI page.

The metric detail page

Each metric has its own page, for the device group and trend range already selected. It reports:

  • Generated Insight — an AI-written reading of this metric over this range. Insights writes it once and reuses it for a day.
  • Description — fixed text from the metric's definition: what the metric counts and why it matters.
  • Performance over the period — your value across the range, against the FireMon Customer Average. That average is the only reference given: no median, no percentile, no target. On a metric compared as a proportion, your percentage of the total is reported alongside it. Benchmarking covers when the average is unavailable.
  • Performance by Device — which devices contribute most to the number, with each device's value, its share of the group total, and its change over the period.

Rules added, removed and modified have no detail page. They lead to Revision Analytics, which reports all three together.

Getting to the rules behind the number

Every metric carries the SIQL query Security Manager needs to list what the metric counted. You can copy that query, or open it directly in SIP with the device group already applied — Security Manager for almost every metric, and Administration for the three that are administrative rather than policy: Managed Devices, Unmanaged Devices and User Logins.

The direct link depends on Insights knowing your SIP installation's address, which the installation sends after it connects. If it is missing on every metric, that address never arrived. See Connect Your SIP Instance. Copying the query still works.