Understanding the Overview Dashboard

Headline tiles

The four tiles at the top show:

• Total Requests -- all HTTP requests in the selected time window
• Egress Bytes -- total bytes sent to clients
• Cache Hit Ratio -- percentage of requests served from cache. The sublabel adapts to your traffic profile: for SFCC sites where dynamic traffic exceeds 40%, the sublabel reads "SFCC typical: 35-55%" instead of a generic target. This auto-detection prevents false concern when storefront pages (/on/demandware.store) are dynamic by design.
• 499 Ratio -- percentage of requests where the client closed the connection before the edge finished responding (healthy: <1%)

World map heatmap

Below the headline tiles, a world map shows traffic volume by ClientCountry using an orange heat scale. Darker orange indicates more requests from that country.

• Hover over any country to see the country name, total requests, and percentage of overall traffic
• Click a country to navigate to the Offenders page filtered by that country. This applies a "Traffic from" filter that shows ASNs whose traffic originates from that country (based on ClientCountry, which is the geographic origin of the request -- not the ASN's headquarters country)

Requests over time

The timeseries chart shows requests stacked by status class (2xx, 499, 3xx, 4xx, 5xx) over the selected range. A sudden spike in 499s or a change in the status mix is the first visual indicator of an attack.

Ranked lists

Three bar-behind-label lists sit below the chart. Each row shows a label, a proportional bar, a count, and a percentage.

Edge Status Codes

Colour-coded by class: green for 2xx, blue for 3xx, amber for 4xx, red for 499, red for 5xx. Click any row to navigate to the Offenders page filtered by that status class.

Data Centres

Shows city names inline (e.g. "LHR · London"). The top 10 are shown by default with a "Show all" toggle to expand the full list. A sudden shift (e.g. SIN appearing at the top when your customers are in the US/EU) can indicate geo-targeted scraping.

Cache Statuses

Each cache status row has a hover tooltip explaining what that status means (hit, dynamic, miss, etc.). Click any row to navigate to the Offenders page filtered by that cache status.

Active alerts

Shows the top 5 open alerts with a severity badge (info, warning, critical). Click "View all" to see the full Alerts page.