HealthInsight reporting on Okta ThreatInsight

Okta HealthInsight reports the number of events detected. It provides links to Okta System Log so admins can learn more about the data events.

The Okta HealthInsight recommendation displays the number of sign-in attempts from suspicious IP addresses in the last seven days.

Here's an example of Okta ThreatInsight configured with audit mode, and suspicious sign-ins have been detected:

Here's an example of Okta ThreatInsight configured with block mode, and suspicious sign-ins have been detected:

The number of suspicious sign-ins detected can be underestimated. Okta ThreatInsight may limit the events reported if the frequency of suspicious sign-ins is too high.