Abstract
Create and customize a dashboard in Cortex XSOAR, including adding widgets to a dashboard. Share a dashboard.
You can create or edit dashboards according to your organization's requirements.
Creating a new dashboard enables designing a personalized interface for specific security investigation needs. This facilitates quick access to critical information and enhances operational effectiveness.
Editing an existing dashboard enables security teams to focus on the most relevant information. By presenting only the most relevant data and metrics, investigation and response is more efficient and streamlined.
Once you create or edit a dashboard, you can share it with relevant roles to facilitate collaboration and enhance visibility into relevant data and insights across teams.
To create a new dashboard, select → → → .
Enter a name for the dashboard.
Select the date range for a dashboard.
From the Date Range dropdown list, set the date range for the dashboard.
By default, a widget inherits the date range that you specify when creating the widget. If the date range for the report or dashboard does not include the widget date range, the data is blank. To change the widget’s date range, click and select Use Widget’s date range or Use Dashboard’s date range. By default, the dashboard’s date range is used and the option in the dropdown shows as Use Widget’s date range. If you change this to use the widget’s date range, the dropdown then shows the option to Use Dashboard’s date range.
Note
Each widget can have its own date range, which can be different from the dashboard's date range.
Add a widget to a dashboard.
Click to create a custom widget or in the Widgets Library, find a relevant existing widget and click Add.
To edit a widget in the dashboard, select then Edit widget.
The edits to the widget in the dashboard apply only for the report. If you want to make changes that are available for other users, dashboards, or reports, edit the widget directly in the Widgets Library by clicking the pencil edit icon.
To add a new widget from the Widgets Library, follow the procedure in Create a widget using the widget builder.
Click Save.
Save the dashboard. If you select Save Version, you can view a history of the changes made to your dashboard and you can revert to previous versions.
Go to → .
Select the dashboard you want to edit.
Click and select Edit, or for an out-of-the-box dashboard click Duplicate.
Enter a name for the dashboard.
Select the date range for a dashboard.
From the Date Range dropdown list, set the date range for the dashboard.
By default, a widget inherits the date range that you specify when creating the widget. If the date range for the report or dashboard does not include the widget date range, the data is blank. To change the widget’s date range, click and select Use widget’s date range or Use dashboard’s date range. By default, the dashboard’s date range is used and the option in the dropdown shows as Use widget’s date range. If you change this to use the widget’s date range, the dropdown then shows the option to Use dashboard’s date range.
Note
Each widget can have its own date range, which can be different from the dashboard's date range.
Add a widget to a dashboard.
Click to create a custom widget or in the Widgets Library, find a relevant existing widget and click Add.
To edit a widget in the dashboard, select then Edit widget.
The edits to the widget in the dashboard apply only for the report. If you want to make changes that are available for other users, dashboards, or reports, edit the widget directly in the Widgets Library by clicking the pencil edit icon.
To add a new widget from the Widgets Library, follow the procedure in Create a widget using the widget builder.
Click Save.
Save the dashboard. If you select Save Version, you can view a history of the changes made to your dashboard and you can revert to previous versions.
Go to the dashboard to share.
Click and select Share.
To share an out-of-the-box dashboard, you need to duplicate it and share the copy.
In the Share dashboard dialog box, select the roles with whom you would like to share this dashboard and their permission levels.
Dashboards can be shared for all roles or for specific roles, with the following permission levels.
Read only: Copy, export, import and remove the dashboard (cannot share or edit).
Once shared, regardless of who creates the dashboard, any user who has read and write permissions can change the sharing options including to stop sharing. If an analyst who created and shared the dashboard deletes the shared dashboard, it is removed from all users.
Read & Edit: Edit, copy, share, export import, and remove the dashboard. For example, analysts may want to enable and encourage team-based dashboards, so that dashboards can be edited and maintained by more than a single user.
Note
Only dashboard owners can delete their dashboards.
Click Save.
The dashboard is now shared among other analysts in the specified role or all roles.
(Users) To add a shared dashboard, from the home page, select and select the shared dashboard from the drop-down.
Instead of a user adding the dashboard, you can send the URL to the user, after sharing the dashboard.
Note
If you are using a remote repository, all dashboards are automatically shared in the development environment. As a result, the Share option can not be selected from the Settings menu.
To stop sharing a dashboard:
Click and select Share.
In the Share dashboard dialog box, remove all the roles.
Click Save.