Expanding IP and Service Rows in the Explorer
Click any IP or service row in the Monocle Explorer's breakdown tables to expand an inline detail panel, without leaving the table.
Difficulty
Beginner
No prior Spur experience needed
Time estimate
1 minute
Typical time to complete
Prerequisites
- A plan with the search entitlement — customers without it see an unavailable state instead of the panel
What you'll achieve
- Expand an IP row to see its observed state at a glance
- Expand a service row to see its service profile
Steps
- 1
Expand a row
In a Monocle Explorer breakdown table, click any IP or service row to expand it. The detail panel loads inline, just for that row, so you don't need to leave the table to look something up.
- 2
Read the IP panel
Expanding an IP row shows its Observed State: classification, service label, infrastructure, exit location, ASN, and risk indicators.
- 3
Read the service panel
Expanding a service row shows its service profile: Active IPs, Distinct Countries, Top Country, Category, Infrastructure Volatility, Net IP Growth, Average Daily Churn, TTL, and a description.
Related FAQs & guides
What is the difference between using Monocle to monitor vs. enforce traffic decisions?
Monitor is passive: Monocle provides visibility into how users connect to your application without impacting users or taking any blocking action. Enforce applies actions such as blocking or allowing traffic based on Monocle's assessments. Most users start with a monitoring phase before configuring and enabling enforcement.
Can we decrypt Monocle assessments ourselves instead of calling an API?
Yes — this is already supported at no extra cost. Every Monocle application has both a Secret Key (for the hosted Decryption API) and a Private Key (for manual backend decryption) available in the Monocle Dashboard. Backend decryption lets your own server decrypt the Monocle Assessment locally using the Private Key, without making a call to Spur's Decryption API.
Do I need a backend to use Monocle?
No. You can use Monocle to gain visibility into traffic intelligence via the Monocle UI without acting on it. With a supported integration like Cloudflare, traffic can be enforced directly from the UI based on policy configuration. A backend is only required if you want to decrypt assessments or apply custom enforcement logic.
Why am I not seeing any data?
Check that your Monocle script is correctly installed, your publishable key is valid, and traffic is reaching your application.
Why did my Monocle assessment volume suddenly drop?
A sudden drop in assessment volume is usually caused by a change on your side — a recent deployment, a Content Security Policy (CSP) update, or a Cloudflare configuration change — rather than a Spur outage. Check your worker logs and recent configuration changes first. If volume still looks incorrect after that, contact support@spur.us with the time the drop started and any recent changes you made.
Does Monocle block traffic?
No, not by default. Monocle evaluates traffic and returns a decision (such as Block or Allow); your system is responsible for enforcing that decision. The exception is supported edge integrations, such as Cloudflare, where Monocle can enforce decisions directly.