Dashboard Overview
The Dashboard is your central command view for the entire SecureLink deployment. It provides real-time visibility into your edge fleet, network traffic, configuration compliance, and security posture at a glance.
KPI Cards
The top of the dashboard displays six key performance indicator cards in a responsive grid:
| Card | Description |
|---|---|
| Edges Online | Number of edges currently online out of total fleet, with a percentage badge. Links to Device Status. |
| Config Status | Count of edges with pending or failed configuration. Badge shows "All Synced", "N Pending", or "N Failed". Links to Edges list. |
| Traffic Rate | Aggregate WAN+LAN bandwidth using dynamic units (bps / Kbps / Mbps / Gbps) so small fleets don't show "0.0 Mbps". Sourced from interface counter metrics via PromQL. Links to Traffic Analysis. |
| Active Alerts | Count of unread, unresolved notifications (matches the topbar badge). Green when zero, amber when alerts exist. Links to Notifications. |
| VPN Tunnels | Main counter: active mesh/partial-mesh peering tunnel links (edge_peering_link). Subtitle shows N WG Apps · N IKEv2 Apps (active WireGuard App VPN peers + active IKEv2 client certificates). Links to Edge Peering. |
| Security | Number of edges with the VPP ACL plugin enabled (sourced from edge_acl_enabled metric, not the legacy DB table). Links to ACL Monitoring. |
Click on any KPI card to navigate directly to the relevant detail page.
Configuration Compliance
The Configuration Compliance card shows the synchronization state of your edge fleet:
| Status | Description |
|---|---|
| Synced | Edge configuration matches the desired state |
| Dirty / Pending | Configuration changes have been made but not yet pushed to the edge |
| Failed | The last configuration push encountered an error |
| Unknown | Edge has not reported configuration state |
The card includes a list of edges needing attention (dirty, pending, or failed), along with the dirty reason and last error where available. Device types are distinguished: edges, connectors, and MTGEs.
Traffic Overview
The Traffic Overview card displays aggregate inbound and outbound bandwidth over time, sourced from Prometheus/VictoriaMetrics via PromQL queries. The chart shows real-time traffic rates across your edge fleet.
Fleet Status
The Fleet Status card provides a breakdown of edge device health:
- Online vs. Offline edge counts with a visual indicator
- Per-edge health status with CPU and memory utilization
- Average fleet CPU and memory percentages
This helps you quickly identify if a significant portion of your fleet is experiencing resource pressure.
Security Posture
The Security Posture card summarizes your network's security status:
- Suricata IDS/IPS Alerts: Recent intrusion detection and prevention alerts grouped by severity
- ACL Statistics: Access control list block counts and rule match summaries
- Links to detailed security monitoring views
Top Applications
The Top Applications card shows the most active network applications by traffic volume, sourced from IPFIX/flowprobe data via PromQL. Applications are identified by port number and displayed with their traffic contribution.
Notifications & Activity
The Notifications widget shows a chronological feed of recent events:
- Alerts: Security events and threshold breaches
- Config Changes: Edge configuration modifications and sync results
- Device Status Changes: Edges coming online, going offline, or entering degraded state
- Recent Activity: Timestamped activity log from the dashboard summary API
Network Health
The Network Health section at the bottom of the dashboard shows four health bars:
| Metric | Description |
|---|---|
| Overall Status | Composite health score for the deployment |
| VPN Availability | Percentage of VPN tunnels that are operational |
| Device Connectivity | Percentage of edges that are online |
| Security Status | Percentage of edges with ACL protection enabled |
Each bar is color-coded by severity:
| Range | Status | Color |
|---|---|---|
| 90--100% | Excellent | Green |
| 70--89% | Good | Blue |
| 50--69% | Warning | Yellow |
| 0--49% | Critical | Red |
Auto-Refresh
The dashboard refreshes automatically every 60 seconds. The Last updated timestamp is displayed in the header next to a manual Refresh button. The refresh button shows a spinning indicator while data is loading.
Tenant Context
SuperAdmin -- All Tenants View
When a SuperAdmin has "All Tenants" selected (no specific tenant chosen), the dashboard displays a simplified view:
- A centered "Select a Tenant" card prompting the admin to choose a tenant from the top menu bar
- A note that Users, Tenants, and System Settings are accessible from the Administration menu
- No data cards, charts, or metrics are shown (these require a tenant context)
This lockdown ensures that cross-tenant aggregate data is not inadvertently displayed. Select a specific tenant from the dropdown to see the full dashboard.
TenantAdmin View
TenantAdmins see the full dashboard for their own tenant with all cards and metrics populated. They do not have a tenant switcher -- the dashboard always shows their tenant's data.