WP Cerber writes to a handful of dedicated tables. wp_cerber_log holds every recorded activity with ip, user_id, activity, stamp, and session_id. wp_cerber_acl stores the active black and white list with ip, tag, and comments. wp_cerber_files keeps malware scanner results with file path, severity, and scan timestamp. The default Activity screen is a paginated list of rows, fine for inspecting a single hit, but it never aggregates volume or distribution.

SleekView Charts puts the answers on one screen. A Number card carries today's blocked hits, a Pie groups by activity code across failed login, IP locked out, bot detected, and others, a Bar ranks the top ip values, and an Area card tracks stamp per day. Each card runs server-side against the same cerber rows, no extra storage required.

Cerber's activity codes use numeric IDs (1 through 80 plus) for each event type, so the Pie card maps the numbers to labels and the layout stays readable even when a brute force wave drives one code to dominate the chart. Multisite installs respect blog scope so a network operator can build a separate dashboard per site or one network-wide rollup.

WP Cerber captures everything needed to understand an attack on a WordPress site, but the Activity and Lockouts screens are designed to surface individual rows. Aggregate questions, the ones that matter when an attack is in progress or being reviewed afterward, need charts. Where did the spike come from, when did it stop, which activity code absorbed it, which IPs were most persistent.

Those questions are about distribution and time, not a single hit. SleekView Charts gives the cerber tables a real dashboard surface so security teams can answer trend questions without exporting and without leaving WordPress. The plugin keeps blocking and logging; the dashboard makes the activity legible.