CyberBlindspot Incident Dashboard

Dashboard to find metrics regarding the CyberBlindspot module

CTM360

Details

IDCyberBlindspot Incident Dashboard
From Version6.10.0
PredefinedYes

Widgets (9)

Name Widget Type Data Type
Active Incidents - Line chart line incidents
Active Incidents - Pie chart pie incidents
Incidents Pending Action - Pie chart pie incidents
Active Incidents (Past Week) number incidents
Running playbooks number incidents
Closed Incidents (Past Week) number incidents
Top Active Playbooks (Past Week) column incidents
Avg. runtime for Playbooks (Past Week) duration metrics
Active Incidents by Module - Pie chart pie incidents
{
    "id": "CyberBlindspot Incident Dashboard",
    "description": "Dashboard to find metrics regarding the CyberBlindspot module",
    "isPredefined": true,
    "version": -1,
    "fromVersion": "6.10.0",
    "fromDate": "0001-01-01T00:00:00Z",
    "toDate": "0001-01-01T00:00:00Z",
    "period": {
        "by": "",
        "byTo": "",
        "byFrom": "days",
        "toValue": null,
        "fromValue": 7,
        "field": ""
    },
    "fromDateLicense": "0001-01-01T00:00:00Z",
    "name": "CyberBlindspot Incident Dashboard",
    "layout": [
        {
            "id": "82290230-9808-11ee-be91-bd9f71ef874f",
            "forceRange": false,
            "x": 0,
            "y": 0,
            "i": "82290230-9808-11ee-be91-bd9f71ef874f",
            "w": 6,
            "h": 3,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2023-12-10T11:20:59.026314772+03:00",
                "created": "2023-12-10T11:20:52.129395461+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.39",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Active Incidents - Line chart",
                "prevName": "Active Incidents - Line chart",
                "dataType": "incidents",
                "widgetType": "line",
                "query": "-category:job and -status:archived and -status:closed type:\"CyberBlindspot Incident\"",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "groupBy": [
                        "occurred(d)",
                        "rawType"
                    ]
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "db208da0-aec8-11ee-82fa-dd707358474c",
            "forceRange": false,
            "x": 9,
            "y": 2,
            "i": "db208da0-aec8-11ee-82fa-dd707358474c",
            "w": 3,
            "h": 3,
            "widget": {
                "id": "active-incidents-by-severity",
                "version": 12,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274425938+03:00",
                "created": "2024-01-07T08:36:16.822326133+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Active Incidents - Pie chart",
                "prevName": "Active Incidents - Pie chart",
                "dataType": "incidents",
                "widgetType": "pie",
                "query": "-category:job and -status:archived and -status:closed type:\"CyberBlindspot Incident\"",
                "isPredefined": true,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "groupBy": [
                        "severity"
                    ],
                    "showGraphValues": false
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "32d91b60-aeca-11ee-82fa-dd707358474c",
            "forceRange": false,
            "x": 6,
            "y": 5,
            "i": "32d91b60-aeca-11ee-82fa-dd707358474c",
            "w": 6,
            "h": 3,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274425938+03:00",
                "created": "2024-01-07T08:36:16.822326133+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Incidents Pending Action - Pie chart",
                "prevName": "Active Incidents - Pie chart",
                "dataType": "incidents",
                "widgetType": "pie",
                "query": "-category:job and -status:archived and -status:closed type:\"CyberBlindspot Incident\"",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "customGroupBy": [
                        {
                            "Close Possible": {
                                "conditions": [
                                    [
                                        {
                                            "field": "ctm360cyberblindspotcourseofaction",
                                            "operator": "isEqualCaseString",
                                            "right": "member side action",
                                            "type": "string"
                                        }
                                    ]
                                ],
                                "name": "Close Possible"
                            },
                            "Monitoring Still Going": {
                                "conditions": [
                                    [
                                        {
                                            "field": "ctm360cyberblindspotcourseofaction",
                                            "operator": "isEqualCaseString",
                                            "right": "monitoring",
                                            "type": "string"
                                        }
                                    ]
                                ],
                                "name": "Monitoring Still Going"
                            },
                            "Close or Takedown Possible": {
                                "conditions": [
                                    [
                                        {
                                            "field": "ctm360cyberblindspotcourseofaction",
                                            "operator": "isEqualCaseString",
                                            "right": "takedown",
                                            "type": "string"
                                        }
                                    ]
                                ],
                                "name": "Close or Takedown Possible"
                            }
                        }
                    ],
                    "groupBy": [
                        "ctm360cyberblindspotcourseofaction"
                    ],
                    "showGraphValues": false,
                    "showOthers": false
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "e6f69960-aef7-11ee-ac47-ef32c7f05a79",
            "forceRange": false,
            "x": 6,
            "y": 0,
            "i": "e6f69960-aef7-11ee-ac47-ef32c7f05a79",
            "w": 3,
            "h": 1,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274656973+03:00",
                "created": "2024-01-07T08:36:16.823054025+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Active Incidents (Past Week)",
                "prevName": "Incidents in Error Run Status",
                "dataType": "incidents",
                "widgetType": "number",
                "query": "-runStatus:error type:\"CyberBlindspot Incident\" and status:Active",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "colors": {
                        "isEnabled": false,
                        "items": {
                            "#00CD33": {
                                "value": 10
                            },
                            "#FAC100": {
                                "value": 20
                            },
                            "#FF1B15": {
                                "value": 40
                            }
                        },
                        "type": "above"
                    }
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "4a71f9d0-aef8-11ee-ac47-ef32c7f05a79",
            "forceRange": false,
            "x": 9,
            "y": 0,
            "i": "4a71f9d0-aef8-11ee-ac47-ef32c7f05a79",
            "w": 3,
            "h": 1,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.273909715+03:00",
                "created": "2024-01-07T08:36:16.821190202+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Running playbooks",
                "prevName": "Running playbooks",
                "dataType": "incidents",
                "widgetType": "number",
                "query": "runStatus:running playbook:\"CyberBlindspot Incident Management\"",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": null,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "colors": {
                        "isEnabled": false,
                        "items": {
                            "#00CD33": {
                                "value": 0
                            },
                            "#FAC100": {
                                "value": 5
                            },
                            "#FF1B15": {
                                "value": 20
                            }
                        },
                        "type": "above"
                    }
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "7d10a7b0-aef8-11ee-ac47-ef32c7f05a79",
            "forceRange": false,
            "x": 6,
            "y": 1,
            "i": "7d10a7b0-aef8-11ee-ac47-ef32c7f05a79",
            "w": 3,
            "h": 1,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274656973+03:00",
                "created": "2024-01-07T08:36:16.823054025+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Closed Incidents (Past Week)",
                "prevName": "Incidents in Error Run Status",
                "dataType": "incidents",
                "widgetType": "number",
                "query": "-runStatus:error type:\"CyberBlindspot Incident\" and status:Closed",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "colors": {
                        "isEnabled": false,
                        "items": {
                            "#00CD33": {
                                "value": 10
                            },
                            "#FAC100": {
                                "value": 20
                            },
                            "#FF1B15": {
                                "value": 40
                            }
                        },
                        "type": "above"
                    }
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "8c864490-af78-11ee-9dec-eb27c047d071",
            "forceRange": false,
            "x": 0,
            "y": 3,
            "i": "8c864490-af78-11ee-9dec-eb27c047d071",
            "w": 6,
            "h": 5,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.27343997+03:00",
                "created": "2024-01-07T08:36:16.820119695+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "size": 5,
                "Cache": null,
                "name": "Top Active Playbooks (Past Week)",
                "prevName": "Top Active Playbooks",
                "dataType": "incidents",
                "widgetType": "column",
                "query": "status:active -category:job and type:\"CyberBlindspot Incident\"",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "groupBy": [
                        "playbookId"
                    ]
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "0a967ed0-af7a-11ee-9dec-eb27c047d071",
            "forceRange": false,
            "x": 9,
            "y": 1,
            "i": "0a967ed0-af7a-11ee-9dec-eb27c047d071",
            "w": 3,
            "h": 1,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274785325+03:00",
                "created": "2024-01-07T08:36:16.823354842+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "6.2.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Avg. runtime for Playbooks (Past Week)",
                "prevName": "Average runtime for Playbooks",
                "dataType": "metrics",
                "widgetType": "duration",
                "query": "type:playbook and incidentType:\"CyberBlindspot Incident\"",
                "isPredefined": false,
                "description": "Average runtime for Playbooks",
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "keys": [
                        "avg|duration"
                    ],
                    "tableColumns": [],
                    "valuesFormat": "minutes"
                },
                "category": ""
            },
            "reflectDimensions": true
        },
        {
            "id": "79ceb8b0-d267-11ef-bb8f-7b3689ec5634",
            "forceRange": false,
            "x": 6,
            "y": 2,
            "i": "79ceb8b0-d267-11ef-bb8f-7b3689ec5634",
            "w": 3,
            "h": 3,
            "widget": {
                "id": "",
                "version": 0,
                "cacheVersn": 0,
                "modified": "2024-01-07T08:36:21.274425938+03:00",
                "created": "2024-01-07T08:36:16.822326133+03:00",
                "sizeInBytes": 0,
                "packID": "CommonWidgets",
                "packName": "Common Widgets",
                "itemVersion": "1.2.44",
                "fromServerVersion": "5.0.0",
                "toServerVersion": "",
                "propagationLabels": [],
                "packPropagationLabels": [
                    "all"
                ],
                "definitionId": "",
                "vcShouldIgnore": false,
                "vcShouldKeepItemLegacyProdMachine": false,
                "commitMessage": "",
                "shouldCommit": false,
                "Cache": null,
                "name": "Active Incidents by Module - Pie chart",
                "prevName": "Active Incidents - Pie chart",
                "dataType": "incidents",
                "widgetType": "pie",
                "query": "-category:job and -status:archived and -status:closed and type:\"CyberBlindspot Incident\"",
                "isPredefined": false,
                "dateRange": {
                    "fromDate": "0001-01-01T00:00:00Z",
                    "toDate": "0001-01-01T00:00:00Z",
                    "period": {
                        "by": "",
                        "byTo": "",
                        "byFrom": "days",
                        "toValue": null,
                        "fromValue": 7,
                        "field": ""
                    },
                    "fromDateLicense": "0001-01-01T00:00:00Z"
                },
                "params": {
                    "customGroupBy": [
                        null
                    ],
                    "groupBy": [
                        "ctm360cyberblindspotmodule"
                    ],
                    "showGraphValues": false,
                    "showOthers": false
                },
                "category": ""
            },
            "reflectDimensions": true
        }
    ]
}