As a service provider, we use the SecOps dashboard feature. That's where we check the time of attacks to see if an attack is happening at the moment or if it has already happened... It is very dynamic and helps us know when an attack occurred, how long it lasted, and what type of attack it was.