---
title: "Dashboard"
slug: "securitymonitoring-dashboard-vpc"
tags: ["Security Monitoring", "VPC"]
updated: 2026-09-17T09:19:52Z
published: 2026-09-17T09:19:52Z
canonical: "guide.ncloud-docs.com/securitymonitoring-dashboard-vpc"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Dashboard

Available in VPC

In Dashboard, you can check the results of detections and actions taken by the security services of Security Monitoring during the search period. In addition, it delivers weekly and monthly reports via email that summarize detection and action results to help users monitor effectively.

              Caution

              

- You can only see the dashboard for the security services you've subscribed to.

## Dashboard screen

The basics of using Dashboard are as follows:

![securitymonitoring-dashboard-vpc_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/securitymonitoring-dashboard-vpc_03_en.png?sv=2026-02-06&spr=https&st=2026-11-14T05%3A05%3A07Z&se=2026-11-14T06%3A05%3A07Z&sr=c&sp=r&sig=9kmVjtQfrgMMlSVKzxMzhLXwIPMNPJLBQ1XJGwXcjwU%3D)

| Field | Description |
| --- | --- |
| ① Menu name | Name of the menu currently being viewed |
| ② Basic features | Cloud Log Analytics service integration/Logging, Inquire about using Security Monitoring/Check details, Refresh Dashboard page |
| ③ Security services | Tab menu for each security service |
| ④ Dashboard | Area to view detection and action results by security service |

## Save security logs

The security log storage feature allows you to send security event logs for each service to Cloud Log Analytics (CLA) for storage.

1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Security Monitoring**.
2. From the **Platform** menu, click and select **VPC**.
3. Click **Services > Security > Security Monitoring** one by one in order.
4. Click the **Dashboard** menu.
5. Click the **+Save security logs** menu.
6. Click **OK** in the **Save security logs** pop-up.

- Security Monitoring in a VPC environment does not provide separate extraction of security event logs. If you need to extract logs, you must use the security log storage feature.
- CLA storage space and pricing information can be found on the [Cloud Log Analytics service introduction page](https://www.ncloud.com/product/management/cloudLogAnalytics).
- The CLA data retention period is 30 days, and if you want to keep security event logs permanently, you can store them in Object Storage using the periodic [Automatic Export Setting](/docs/en/cla-use-exportlog).
- To use the security log storage feature, you must complete the [CLA Request](/docs/en/cla-start) in advance. If you cancel CLA service in the middle, the additional logs will not be collected.

![securitymonitoring-vpc_cla_pub_ids_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/sm_vpc_cla_pub_ids_en.png?sv=2026-02-06&spr=https&st=2026-11-14T05%3A05%3A07Z&se=2026-11-14T06%3A05%3A07Z&sr=c&sp=r&sig=9kmVjtQfrgMMlSVKzxMzhLXwIPMNPJLBQ1XJGwXcjwU%3D)

![securitymonitoring-vpc_cla_dashboard](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/SM_CLA.png?sv=2026-02-06&spr=https&st=2026-11-14T05%3A05%3A07Z&se=2026-11-14T06%3A05%3A07Z&sr=c&sp=r&sig=9kmVjtQfrgMMlSVKzxMzhLXwIPMNPJLBQ1XJGwXcjwU%3D)

              Note

              

To integrate the Cloud Log Analytics service with the Security Monitoring service, you must apply for the Cloud Log Analytics service in advance.

## View Dashboard

You can view the results of detections and actions taken by security services during the search period in tables and graphs. The following describes how to view the information.

1. In the VPC environment of the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Security Monitoring**.
2. From the **Platform** menu, click and select **VPC**.
3. Click **Services > Security > Security Monitoring** one by one in order.
4. Click the **Dashboard** menu.
5. Click the tab menu of the security service for which you want to view the detection and action results.
  - [IDS](/docs/en/securitymonitoring-dashboard-vpc#IDS)
  - [Anti-Virus](/docs/en/securitymonitoring-dashboard-vpc#Anti-Virus)
  - [Anti-DDoS](/docs/en/securitymonitoring-dashboard-vpc#Anti-DDoS)
  - [WAF](/docs/en/securitymonitoring-dashboard-vpc#WAF)
  - [IPS](/docs/en/securitymonitoring-dashboard-vpc#IPS)

### IDS

When you click the **IDS** tab menu, you can view the detected attacks within the search period. To check the detection results of IDS follow these steps:

1. When the IDS page appears, click and select the period you want to search from **Select period**.
  - You can select in 31-day increments when typing directly, and you can view logs going back up to one year.
2. To add search conditions, set the necessary items from **Zone**, **Attack type**, **Attacker IP**, and **Target IP**.
3. Click the **[Search]** button.
4. Check the search results.
  - Registered time: time the detected security event was registered on the console
    - You can check the actual detection time of the security event in **View details**.
  - Zone: the zone where the security event was detected
  - Attack type: the attack type of the detected security event
  - Report type: information according to the analysis result of the detected security event
    - Analysis report: when the report finds that the user's service is affected, the user needs to check the issue.
    - Vulnerability action recommendation: a vulnerability has been detected in the user's service, and actions need to be taken.
    - Intrusion analysis: it is determined to be an intrusion, and emergency actions need to be taken.
  - Attacker IP: detected attacker IP address
  - Target IP: IP address targeted for the attack
  - View: for more information on detection information and load balancer information (when the target of the attack is LB IP) of the security event, click **View details**.
  - Exceptions: to request an exception to exclude the same security event from being detected as an attack, click **Exceptions**, enter the exception request details in up to 500 characters, and then click the **OK** button.
5. Click **View graph** to see the statistical figures for the search result in a graph.  

![securitymonitoring-dashboard-vpc_02_ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/securitymonitoring-dashboard-vpc_02_en.png?sv=2026-02-06&spr=https&st=2026-11-14T05%3A05%3A07Z&se=2026-11-14T06%3A05%3A07Z&sr=c&sp=r&sig=9kmVjtQfrgMMlSVKzxMzhLXwIPMNPJLBQ1XJGwXcjwU%3D)
6. Check the graph.
  - Number of detected attacks by attack type: you can check the number of detected attacks by attack type by hovering the mouse over it.
  - Rate of detected attacks by attack type: you can check the rate of detected attacks by attack type by hovering the mouse over it. You can click attack types to select only the items you want to see in the graph.
  - Number of detected attacks by attacker IP: you can check the number of detected attacks by attacker IP by hovering the mouse over it.
  - Rate of detected attacks by attacking country: you can check the rate of detected attacks by attacking country by hovering the mouse over it. You can click attacking countries to select only the items you want to see in the graph.

              Note

              

- To close the graph you checked from Step 6, click **Hide graph**.
- In Step 6, the attacking country is determined through the attacker IP, and the country name is indicated by the country code. For country codes, see [ISO 3166-1 alpha-2](https://ko.wikipedia.org/wiki/ISO_3166-1_alpha-2).

### Anti-Virus

When you click the **Anti-virus** tab menu, you can view the information of detected malware within the search period. In addition, you can check the method that was used to handle the detected malware. To check the detection and action results of Anti-virus follow these steps:

1. When the Anti-virus page appears, click and select the period you want to search from **Select period**.
  - You can select in 31-day increments when typing directly, and you can view logs going back up to one year.
2. To add search conditions, set the necessary items from **Zone**, **Detection name/Detection path**, and **Detected IP**.
3. Click the **[Search]** button.
4. Check the search results.
  - Detection time: the time when the security event was detected
  - Zone: the zone where the security event was detected
  - VPC: name of VPC where the security event was detected
  - Subnet: name of subnet where the security event was detected
  - Detection name: name of the detected malicious file
  - Detected IP: the IP address where the malware was detected
  - Detection path: the location where the malware was detected
  - Action status: it refers to the method used to handle the detected malicious file. It is categorized as follows: Quarantine, Pass, and Delete.
  - Exceptions: to request an exception to exclude the same security event from being detected as malware, click **Exceptions**, enter the exception request in up to 500 characters, and then click the **[OK]** button.
5. Click **View graph** to see the statistical figures for the search result in a graph.
6. Check the graph.
  - Number of detections by detection name: you can check the number of detections by detection name by hovering the mouse over it.
  - Number of detections by detection IP: you can check the number of detections by detection IP by hovering the mouse over it.

              Note

              

To close the graph you checked from Step 6, click **Hide graph**.

### Anti-DDoS

When you click the **Anti-DDoS** tab menu, you can view the detected attacks within the search period. To check the detection results of Anti-DDoS follow these steps:

1. When the Anti-DDoS page appears, click and select the period you want to search from **Select period**.
  - You can select in 31-day increments when typing directly, and you can view logs going back up to one year.
2. To add search conditions, set the necessary items from **Zone**, **Attacker IP**, and **Target IP**.
3. Click the **[Search]** button.
4. Check the search results.
  - Registered time: the time when the security event was detected
  - Zone: the zone where the security event was detected
  - VPC: name of VPC where the security event was detected
  - Attacker IP: detected attacker IP address
  - Target IP: IP address targeted for the attack
  - Attack type: the attack type of the detected security event
  - View: for more information on detection information, analysis information, and load balancer information (when the target of the attack is LB IP) of the security event, click **View details**.
  - Exceptions: to request an exception to exclude the same security event from being detected as an attack, click **Exceptions**, enter the exception request details in up to 500 characters, and then click the **OK** button.
5. Click **View graph** to see the statistical figures for the search result in a graph.
6. Check the graph.
  - Number of detected attacks by attack type: you can check the number of detected attacks by attack type by hovering the mouse over it.
  - Rate of detected attacks by attack type: you can check the rate of detected attacks by attack type by hovering the mouse over it. You can click attack types to select only the items you want to see in the graph.
  - Number of detected attacks by attacker IP: you can check the number of detected attacks by attacker IP by hovering the mouse over it.
  - Rate of detected attacks by attacking country: you can check the rate of detected attacks by attacking country by hovering the mouse over it. You can click attacking countries to select only the items you want to see in the graph.

              Note

              

- To close the graph you checked from Step 6, click **Hide graph**.
- In Step 6, the attacking country is determined through the attacker IP, and the country name is indicated by the country code. For country codes, see [ISO 3166-1 alpha-2](https://ko.wikipedia.org/wiki/ISO_3166-1_alpha-2).

### WAF

When you click the **WAF** tab menu, you can view the attacks detected and then blocked within the search period. To check the blocking results of WAF follow these steps:

1. When the WAF page appears, click and select the period you want to search from **Select period**.
  - You can select in 31-day increments when typing directly, and you can view logs going back up to one year.
2. To add search conditions, set the necessary items from **Zone**, **Blocked event/Attack type**, **Attacker IP**, and **Target IP**.
3. Click the **[Search]** button.
4. Check the search results.
  - Blocked time: the time when the security event was blocked
  - Zone: the zone where the security event was detected and blocked
  - Blocked URL: information of the blocked service domain
  - Blocked event: name of the Security Monitoring rule that blocked the attack
  - Attack type: the attack type of the detected security event
  - Attacker IP: detected attacker IP address
  - Target IP: IP address targeted for the attack
  - Risk level: it categorizes and displays the risk level of the detected security event. <example> Very high, High, Medium, Low, Info
  - View: for more information on detection information and blocking information of the security event, click **View details**.
  - Exceptions: to request an exception to exclude the same security event from being blocked, click **Exceptions**, enter the exception request details in up to 500 characters, and then click the **[OK]** button.
5. Click **View graph** to see the statistical figures for the search result in a graph.
6. Check the graph.
  - Number of detected attacks by attack type: you can check the number of detected attacks by attack type by hovering the mouse over it.
  - Number of detected attacks by attacker IP: you can check the number of detected attacks by attacker IP by hovering the mouse over it.

              Note

              

To close the graph you checked from Step 6, click **Hide graph**.

### IPS

When you click the **IPS** tab menu, you can view the detected attacks within the search period. To check the blocking results of IPS follow these steps:

1. When the IPS page appears, click and select the period you want to search from **Select period**.
  - You can select in 31-day increments when typing directly, and you can view logs going back up to one year.
2. To add search conditions, set the necessary items from **Zone**, **Blocked event/Attack type**, **Attacker IP**, and **Target IP**.
3. Click the **[Search]** button.
4. Check the search results.
  - Blocked time: the time when the security event was blocked
  - Zone: the zone where the security event was detected and blocked
  - Service domain: information about user's service domain to be protected from attacks
  - Blocked event: name of the Security Monitoring rule that blocked the attack
  - Attack type: the attack type of the detected security event
  - Attacker IP: detected attacker IP address
  - Attacker port: detected attacker port number
  - Target IP: IP address targeted for the attack
  - Target port: port number targeted for the attack
  - Number of attacks: number of detections for the same security event
  - Exceptions: to request an exception to exclude the same security event from being blocked, click **Exceptions**, enter the exception request details in up to 500 characters, and then click the **[OK]** button.
5. Click **View graph** to see the statistical figures for the search result in a graph.
6. Check the graph.
  - Number of detected attacks by blocked event: you can check the number of detected attacks by blocked event by hovering the mouse over it.
  - Number of detected attacks by attacker IP: you can check the number of detected attacks by attacker IP by hovering the mouse over it.

              Note

              

To close the graph you checked from Step 6, click **Hide graph**.

              Caution

              

To withdraw exception requests or exception handling results, make a request from the **Customer support > Support center > Contact us** in NAVER Cloud Platform portal.