HealthInsight reporting on Okta ThreatInsight

Okta HealthInsight reports the number of events detected. It provides links to Okta System Log so admins can learn more about the data events.

The Okta HealthInsight recommendation displays the number of sign-in attempts from suspicious IP addresses in the last seven days.

Here's an example of Okta ThreatInsight configured with audit mode, and suspicious sign-in attempts have been detected:

Here's an example of Okta ThreatInsight configured with block mode, and suspicious sign-in attempts have been detected:

Note:

The number of suspicious sign-in attempts detected can be underestimated. Okta ThreatInsight may limit the events reported if the frequency of suspicious sign-in attempts is too high.