The Dwell Time panel shows the daily average for how long malware dwells on hosts that are reporting to this server over a 30-day period.
This average is based on the duration between when an undesirable binary first appears on one of the hosts and it is longer reported on any hosts. The following image shows zero dwell time activity; this is desirable.
