Create a widget from an indicator - Administrator Guide - 8.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation
Product
Cortex XSOAR
Version
8.5
Creation date
2024-03-10
Last date published
2024-12-12
Category
Administrator Guide
Solution
On-prem
Abstract

Create a custom widget from an indicator and add it a dashboard or report in Cortex XSOAR.

To create a widget from an indicator, you need to run a query from the Threat Intel page, and then save the visual results as a widget. If you do not have a TIM license, the page is called Indicators.

  1. In the Threat Intel (Indicators) page, select the date rage from the dropdown list.

  2. In the query field, type the query criteria as required and run the query.

  3. Click create-widget.png.

  4. Follow the procedure in Create a widget using the widget builder.

  5. Click Save.

    The widget is added to the Widgets Library.

    Note

    By default, the widget inherits the date range that you specify when creating the widget, but you can modify the date range when you create the dashboard or report. If the date range for the report or dashboard does not include the widget date range, the data is blank. To override the dashboard or report’s date range, click Use Widget’s date range.

  6. Add the widget to a report or dashboard, as required.