Saved By Dbot (ROI) Widget - Administrator Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.9
Creation date
2022-09-29
Last date published
2024-12-05
End_of_Life
EoL
Category
Administrator Guide
Abstract

Customize Saved by Dbot widget that calculates the amount saved by Cortex XSOAR, using a server configuration. Return on Investment (ROI) widget.

In the Dashboard, Incidents tab, Cortex XSOAR comes with a number of pre-installed widgets, such as Saved by DBot.

The Saved by Dbot widget calculates the amount saved in dollars according to actions carried out by all users in Cortex XSOAR across all incidents.

Note

Although the widget comes out of the box with Cortex XSOAR, you can add the Return on Investment (ROI) widget in the Widgets Library, which is identical to the Saved by Dbot widget.

The following parameters are used to calculate the amount saved by Dbot (ROI):

Parameter

Description

Man Hour

The amount in dollars of each hour for an analyst.

Roundtrip

The time it takes in minutes to run an integration task with any of the integrated products. This can be a command within a script or inside the War Room.

Report

The times it takes to write an incident report.

Script

The time it takes to undertake an action that a script would do.

The ROI is calculated as follows:

(# of times roundtrip completed * time taken to do roundtrip) + (# of times report generated * time taken to generate report) + (# of times automation run * time taken to run automation)] * cost of 1 Man hour in dollars.

'Number of times' is how many times an automated procedure has run since Cortex XSOAR was installed. If you reset the Saved by dBOT widget to 0 via the API after installation, 'number of times' is how many times an automated procedure has run since the last reset. The Saved by dBOT widget is based on absolute time and does not support date ranges.

You can change the way ROI is calculated based on your own statistics of time taken to perform the tasks for the actions when done manually. To change the statistics, select SettingsAboutTroubleshootingAdd Server Configuration and add the following keys and values:

Keys

Values

ROI.Cost.ManHour

Amount in dollars. Default: 60

ROI.Time.RoundTrip

Amount in minutes (whole number). Default: 5

ROI.Time.Report

Amount in minutes (whole number). Default: 5

ROI.Time.Script

Amount in minutes (whole number). Default: 5

You can also change the currency symbol from dollars to a currency of your choice.