Example of how to create a widget that shows data about Cortex XSOAR incidents. Run a search query, save results as a widget and add to a dashboard.
In the following example, you need to create a widget that contains:
Incidents created in the last 6 months
Status: Every status other than closed
Category: All categories other than jobs
Use Access Investigation - Generic playbook
In the Incidents page, run the following query:
Type the name (Closed Job Incidents (past 6 months)) and save the query results as a widget:
Add/Edit a dashboard and locate the widget:
Add the widget to the dashboard. If no data is returned, click Use widget’s date range.