Home
Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
User Guide
Information about the main features of Vantage and the tasks that you can do from the user interface (UI).
Vantage IQ
Vantage IQ helps you navigate and explore your network. You can use smart query commands to leverage advanced machine learning and data analytic algorithms to dive deeper into your data.
Queries
With Vantage IQ, you can create charts, graphs, and AI calculations.
Timeline
Use the timeline command to display events or metrics in chronological order for time-based analysis.

Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
- Introduction
  An overview of Vantage.
- Administrator Guide
  Information about the Administration section of Vantage, and the tasks that you can do in this part of the software.
- User Guide
  Information about the main features of Vantage and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the alerts notifications that your sensors pass to Vantage related to security incidents in your network. This page lets you learn about the alerts, edit their values and post comments.
  - Assets
    The Assets page shows all the physical components and systems that Vantage has detected through your sensors. Composed of one or more nodes, assets are the fundamental resources that Vantage protects.
  - Wireless
    The Wireless page lets you buy and connect a Guardian Air sensor. Once you have connected one or more Guardian Air sensor, the Wireless page show the connected Guardian Air sensors.
  - Queries
    The Queries page lets you write queries for your system. You can also save queries and assertions to be used again.
  - Vulnerabilities
    The Vulnerabilities page shows a list of all the vulnerabilities that Vantage has detected in your system. Vulnerabilities are weaknesses that reduce the security of your system and give threat actors an opportunity to exploit your system.
  - Vantage IQ
    Vantage IQ helps you navigate and explore your network. You can use smart query commands to leverage advanced machine learning and data analytic algorithms to dive deeper into your data.
    - Requirements
      Most Vantage IQ features require a Vantage IQ license; limited IQ summaries are available without a license.
    - IQ assistant widget
      The IQ assistant widget gives you access to the Vantage IQ assistant from any page, without leaving your current view.
    - Assistant
      The Assistant page lets you ask questions about your environment. The Vantage IQ assistant uses artificial intelligence (AI) that is connected to your Vantage instance.
    - Insights
      The Insights page shows a dynamic summary of all the insights for your organization. The table shows a row for each insight, which relates to items within the environment that need to be addressed. Severity level and last trigger time determine the sort order.
    - Time Series
      The Time Series page uses machine learning to detect and forecast abnormal network activity across your sensors and numeric variables.
    - IQ summaries
      IQ summaries appear as a summary bar at the top of multiple pages in Vantage, providing a quick overview of Vantage IQ insights relevant to that page.
    - Queries
      With Vantage IQ, you can create charts, graphs, and AI calculations.
      - Cluster
        Use the cluster command to group rows by recognized patterns and identify outliers in your data.
      - Compare
        Use the compare command to evaluate differences between two datasets or time periods.
      - Correlation
        Use the correlation command to discover relationships between fields or metrics in your data.
      - Describe
        Use the describe command to generate a statistical summary of a dataset, including counts, ranges, and distributions.
      - Forecast
        Use the forecast command to predict future values based on historical trends in your data.
      - Pivot
        Use the pivot command to reshape query results by rotating row values into columns for cross-tabulation.
      - Popular
        Use the popular command to identify the most frequently occurring values in a dataset.
      - Simplify
        Use the simplify command to reduce query output to its key patterns, making large result sets easier to interpret.
      - Timeline
        Use the timeline command to display events or metrics in chronological order for time-based analysis.
      - Versus
        Use the versus command to compare two specific entities or metrics side by side.
      - Visualize
        Use the visualize command to render query results as a chart or graph for at-a-glance interpretation.
  - Network
    The Network page shows a visual representation of your network and all its assets.
  - Graph
    Displays a visual map of your network, highlighting asset connections and communication paths. Users can switch between network and physical views to explore infrastructure relationships.
  - Process
    The Process page shows a list of processes in your environment. Processes are a set of repeatable functions that a business does to deliver a core value.
  - Dashboards
    The Dashboards page shows a list of all the dashboards that have been created.
  - Reports
    The Reports page shows all the reports that the sensors in your system have created.
  - Sites
    The Sites page shows all the geographical locations of the assets in your system. It lets you associate a site to one or more network domains. You can also add details such as the country or city of the site.
  - Workbooks
    The Workbooks page shows recommended courses of action that can improve your network security. Generated through machine learning, workbooks highlight the vulnerabilities currently creating the highest risk exposure.
  - Threat Intelligence
    The Threat Intelligence page shows an overview of all of the available threat cards and categories. It also lets you filter the threat cards to show only malware, threat actors, or vulnerabilities
  - Asset Risk
    The Asset Risk page provides an in-depth view of asset risk levels. This includes an overview, detailed analysis, and benchmark comparisons to help assess and manage risks effectively.
  - Smart Polling
    Smart Polling provides a centralized interface for creating, managing, and monitoring polling plans within your organization. It helps you streamline data collection and control monitoring activities from one location.
  - Async operations
    The Async operations page lets you keep track of tasks that are being executed in the background, and it shows their outcome once that they are completed.
  - What's new drawer
    The What's new drawer shows a list of new features, enhancements, and fixes for issues.
  - Administration
  - Profile settings
    The profile settings menu lets you edit your user settings and update your profile.
  - Organizations menu
    The organizations menu lets you search or show a list of all of your organizations, and lets you switch between them. Vantage provides a default organization, but administrators can add more organizations as necessary.
- Print format documentation
  A list of all the print-format documentation that is available for Vantage.

Timeline

Use the timeline command to display events or metrics in chronological order for time-based analysis.

Usage: <field> | timeline <field>

Description: Displays the most significant events for the given dataset as time moves forward.

Example: alerts | timeline time

Vantage IQ query result showing the most significant alert events in chronological order — Figure 1. Query result: alerts | timeline time

Example: assets | timeline created_at

Vantage IQ query result showing the most significant asset events in chronological order by creation date — Figure 2. Query result: assets | timeline created_at