Create a custom widget from an indicator and add it a dashboard or report in Cortex XSOAR.
Widgets are the visual components that populate dashboards and reports with specific data. Although there are various out-of-the-box system widgets available, you can create custom widgets from indicators and then add them to a dashboard or report. You can also Create a Widget Using the Widget Builder.
To create a widget from an indicator, you need to run a query from the Threat Intel page, and then save the visual results as a widget. If you do not have a TIM license, the page is called Indicators.
In the Threat Intel (Indicators) page, select the date rage from the dropdown list.
In the query field, type the query criteria as required and run the query.
Click
.Follow the procedure in Create a Widget Using the Widget Builder.
Click Save.
The widget is added to the Widgets Library.
Note
By default, the widget inherits the date range that you specify when creating the widget, but you can modify the date range when you create the dashboard or report. If the date range for the report or dashboard does not include the widget date range, the data is blank. To override the dashboard or report’s date range, click Use Widget’s date range.
Add the widget to a report or dashboard, as required.