Track usage

Monitor organization usage, limits, and activity across users and endpoints.

Accessing the usage dashboard

  1. Click your name in the upper-right corner of the screen and select Manage Organization.
  2. Click the Usage tab.

Usage overview

Summary cards at the top of the page display your organization’s current usage and allocation status.

Total usage

The Total usage card displays progress toward your organization’s contracted monthly usage limit.

The progress bar updates dynamically as usage accumulates throughout the month.

📘

Note

Contracted usage limits are soft limits. Exceeding the limit may result in warning notifications. Sustained overages may result in throttling or account review.


User allocation

The Users card displays your contracted monthly active user limit.

A monthly active user is any user who generates usage during the current month. Activity includes:

  • UI queries
  • API queries
  • v2 API queries
  • Automated searches
  • YARA rules

There is no restriction on the total number of registered users. Limits apply only to monthly active users.


Reviewing usage metrics

The Usage tab includes a configurable usage table that provides detailed visibility into consumption across your organization.

By default, the table displays a month-by-month summary across usage categories and a dynamically calculated total.


Usage categories

Usage is tracked across multiple activity types, including:

  • UI queries
  • API queries
  • v2 API queries
  • Automated searches
  • YARA rules

The Total column represents the sum of usage categories for the selected grouping.

📘

Note

UI query usage is multiplied by five. v2 API query usage is multiplied by three.

Multipliers reflect differences in backend processing across query types.


Configuring the usage table

The usage table supports pivot-style grouping and filtering.

Filtering

Use the date selector and filters to narrow results by time range, user, or activity type.

Grouping

Use the View control to adjust how data is grouped. Examples include:

  • Grouping by user to view individual consumption
  • Grouping by API path to analyze endpoint usage
  • Grouping by month or hour to adjust time granularity

The table recalculates totals dynamically based on the selected grouping.


Granularity

Usage can be analyzed at multiple time levels, including monthly and hourly views.

Hourly granularity supports identification of short-term activity patterns.


Notifications

Usage notifications can be enabled to receive alerts when your organization approaches or exceeds its contracted usage limit.

Toggling notifications

To enable or disable usage notifications:

  1. Click the bell icon in the top-right corner of the Total Usage card.

Notification status is indicated by the bell icon:

  • A bell with a slash indicates that email notifications are disabled.
  • A standard bell icon indicates that email notifications are enabled.