Create a Widget from an Indicator - Administrator Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.9
Creation date
2022-09-29
Last date published
2024-11-05
End_of_Life
EoL
Category
Administrator Guide
Abstract

Create a custom widget from an indicator and add it a dashboard or report in Cortex XSOAR.

Widgets are the visual components that populate dashboards and reports with specific data. Although there are various out-of-the-box system widgets available, you can create custom widgets from indicators and then add them to a dashboard or report. You can also Create a Widget using the Widget Builder.

To create a widget from an indicator, you need to run a query from the Indicators page, and then save the visual results as a widget.

  1. In the Threat Intel (Indicators) page, from the dropdown list select the date range.

  2. In the query field, type the query criteria as required and run the query.

  3. Click create-widget.png.

  4. Follow the procedure in Create a Widget using the Widget Builder.

  5. Click Save.

    The widget is added to the Widgets Library.

    Note

    By default, the widget inherits the date range that you specify when creating the widget, but you can modify the date range when you create the dashboard or report. If the date range for the report or dashboard does not include the widget date range, the data is blank. To override the dashboard or report’s date range, click Use Widget’s date range.

  6. Add the widget to a report or dashboard, as required.