The Monitoring page is where you review individual events as they flow through your AI deployments. It shows traffic as a continuous stream of events rather than grouped into interactions, so it is the place to go when you want to scan everything moving through the system, spot the events that warrant a closer look, and open any one of them for full detail. Where the Sessions page reconstructs a complete interaction from start to finish, Monitoring works at the level of the individual event, across all traffic or scoped to a use case or profile.

Getting Started

The Monitoring landing page gives you two ways in. Show All Traffic loads every event across the account. Open Filters opens the filter panel so you can narrow to a specific use case or profile before any events load. The landing page also highlights three things the page does: it can scope events to a profile, it monitors in real time, and it detects signals on the traffic it shows.

Reading the Event Table

The event table displays one row per event. It is the surface for triaging traffic: scanning for events that show risk, then opening the ones that need investigation. The table is highly configurable, so most reviewers work with a subset of columns suited to what they are looking for. The columns fall into a few groups based on what they tell you.

By default, a core set of columns is shown and the rest are hidden. You can enable or disable any column, reorder the visible ones, and save named layouts. The table below lists which columns are shown out of the box and which are hidden until you add them.

Identifying an Event

These columns tell you what an event is and where it came from.

• ID and Time: The event ID and the timestamp.
• Event Source: The actor or component that initiated the event.
• Event Target: The actor or component that received the event.
• Sender: The actor that sent the event.
• Receiver: The actor that received the event.
• User: The user associated with the event.
• Use Case: The use case the event belongs to.
• Profile: The profile that evaluated the event.

Assessing Risk and Outcome

These columns surface whether an event raised any concerns and what was done about it. They are the ones to scan first when triaging.

• Indicator: A red line if the event has Safety or Security alerts. The column is empty when there are none.
• Safety: A green check mark when there are no Safety alerts, or the count of alerts where there are.
• Security: A green check mark when there are no Security alerts, or the count of alerts when there are.
• Input Action: The action taken on the input: blocked, modified, or none.
• Output Action: The action taken on the output: blocked, modified, or none.
• Session Status

Reviewing Content

These columns show what was actually said and what was detected in it.

• Input: The input content of the event.
• Output: The output content of the event.
• Input and Output: The input and output content shown together.
• Intent: The detected intent of the event.
• Sentiment: The detected sentiment of the event.

Timing and Processing

These columns report how long the event took to handle and how large it was.

• Input Analysis Duration: The time spent analyzing the input.
• Output Analysis: The time spent analyzing the output.
• LLM Duration: The time spent on the model call.
• Input Token Count: The number of tokens in the input.
• Output Token Count: The number of tokens in the output.

Navigating and Collecting Events

These columns are controls rather than event data.

• Session: A button that opens the Session table for the interaction the event belongs to.
• Selector: A checkbox for selecting events. Selected events can be copied to a collection with the Collections button.
• Bookmark: Whether the event is bookmarked.

Filtering

The filter panel narrows the table to the events you want. It offers four categories of filter:

• Selectors: Use Case and Profile
• Time Range: A window of time.
• Input and Output: Actions, Categories, and Signals applied to the input, the output, or both.
• Sentiment: The detected sentiment.

Filters can be saved as named presets and loaded or deleted from the filter panel.

Collections Mode

Collections mode is accessible from the toolbar. When it is active, a Collections column appears and events can be selected and copied to a collection with the Copy to Collections button. A collection gathers events together so they can be processed in bulk through Cannon.

Table Settings

Table settings control how the table is displayed. You can enable or disable columns, drag to reorder the visible columns, save named layouts, and set how many rows appear per page. Rows per page accepts a value from 1 to 500.