Skip to content

My DashboardsπŸ”—

My Dashboards is where you can create custom dashboards. Custom dashboards enable you to prioritize the data visualizations most relevant to you, through preconfigured widgets and a drag-and-drop interface. Custom dashboards are user specific, and each user can configure as many as they wish.

My Dashboards

Tip

If you are opted in to Preview mode, you can now share a custom dashboard tenant wide or with individual users and create custom widgets.

Access My DashboardsπŸ”—

To access your custom dashboards, select Dashboards from the Taegis Menu and choose My Dashboards.

Each custom dashboard can be loaded from the My Dashboards drop-down menu at the top of the page.

Create a New DashboardπŸ”—

Creating a New Custom Dashboard

To create a new custom dashboard:

  1. Open the My Dashboards drop-down menu and select Create Dashboard.

  2. The dashboard is created. Select Add New Widget to start populating the dashboard with preconfigured widgets. Users opted in to Preview mode can also create custom widgets.

Tip

Copy an existing custom dashboard into a new one by selecting More Options > Duplicate Dashboard.

Preconfigured WidgetsπŸ”—

The following preconfigured widgets are available for custom dashboards. Users opted in to Preview mode can also create custom widgets.

Top 10 Source IPs in AlertsπŸ”—

The Top 10 Source IPs in Alerts widget displays the top 10 IP addresses that appear as the source of alerts.

This provides a sense of whether there is an egregious offender across all alerts.

Top 10 Source IPs in Alerts Widget

Top 10 Target IPs in AlertsπŸ”—

The Top 10 Target IPs in Alerts widget displays the top 10 IP addresses that appear as the destination of alerts.

This helps identify the most commonly targeted assets across all alerts.

Top 10 Target IPs in Alerts Widget

Top 10 Users in AlertsπŸ”—

The Top 10 Users in Alerts widget displays the top 10 usernames that appear in alerts.

This indicates whether there is a more at-risk user in the environment.

Top 10 Users in Alerts Widget

Alert Workload BreakdownπŸ”—

The Alert Workload Breakdown widget displays the total number of alerts, broken down by those that have been triaged by analysts, suppressed by alert rules, and those that are open or ongoing.

This indicates the volume of alerts handled by security analysts vs. saved by Secureworks® Taegis™ XDR vs. awaiting review.

Alert Workload Breakdown Widget

Top 10 Alerts by NameπŸ”—

The Top 10 Alerts by Name widget displays the top 10 alerts by title.

This provides insight on whether a common tactic has been leveraged across all alerts.

Top 10 Alerts by Name Widget

Alert Volume Trend by SeverityπŸ”—

The Alert Volume Trend by Severity widget displays the total number of alerts created, grouped by severity.

This highlights the proportion of alert severities over time.

Alert Volume Trend by Severity Widget

Alert Volume Trend over TimeπŸ”—

The Alert Volume Trend over Time widget displays the total number of alerts created.

This depicts increasing/decreasing trends in alert creation or abnormal spikes/deficits in alert activity.

Alert Volume Trend over Time Widget

Open Investigation AssignmentsπŸ”—

The Open Investigation Assignments widget displays a list view indicating the quantity of open investigations for each assignee.

This highlights which users have investigations that need to be resolved.

Open Investigation Assignments Widget

MITRE ATT&CK Alert Heatmap πŸ”—

The MITRE ATT&CK Alert Heatmap widget maps your alerts to MITRE ATT&CK V9 Enterprise techniques. This helps identify the most commonly observed MITRE ATT&CK techniques across all alerts and allows for quick filtering of alerts by technique.

The heatmap depicts the volume of techniques observed in your environment. An empty cell indicates that the technique was not observed during the chosen time frame. A colored cell indicates the technique was observed, with increasing alert counts visualized with increasing color brightness.

MITRE ATT&CK Alert Heatmap Widget

Adjust the HeatmapπŸ”—

Select an alert severity filter chip from the top of the widget to remove or add alerts of that severity to the heatmap.

Select the Sort menu to adjust the sort of techniques, and use the Color menu to change the color used in the heatmap.

Adjust the Heatmap

Analyze the HeatmapπŸ”—

Hover over a cell to view the technique name and alert count. Select a cell to open a popup with the description of the technique, and for those that are mapped to alerts, a stacked bar chart depicting the volume of the applicable alerts by severity.

MITRE ATT&CK Technique

The expanded view of the widget includes a table of the underlying alerts. From this view, select one or more cells to filter the table below the widget to just those applicable alerts.

Filter MITRE ATT&CK Technique Table

Alert Flow πŸ”—

The Alert Flow widget uses the aggregation of alert data from your environment to visualize the frequencies of various categorical data and how these categories connect.

This allows you to both see the frequency of this alert data and interactively explore and analyze the connections between each category. For example, you can analyze how many alerts with high threat scores of 8-10 end up with a particular status, or how many alerts generated by a specific detector result in a particular threat score.

Alert Flow Widget

Adjust the DiagramπŸ”—

Select a filter chip from the top of the widget to remove or add that column in the visualization.

Toggle the Investigated Alerts setting to On at the top right to include only alerts added to an investigation, or to Off to include only alerts that have not been added to an investigation from the chosen time frame in the diagram. This defaults to On.

Adjust Alert Flow Widget

Analyze the DiagramπŸ”—

Hover over a node or the path between nodes to view the count of applicable alerts.

The expanded view of the widget includes a table of the underlying alerts. From this view, select a node or path to filter the table below the widget to just those applicable alerts.

Analyze Alert Flow Widget

Investigation Flow πŸ”—

The Investigation Flow widget uses the aggregation of investigation data from your environment to visualize the frequencies of various categorical data and how these categories connect.

This allows you to both see the frequency of this investigation data and interactively explore and analyze the connections between each category. For example, you can analyze the connection between investigations by a specific creator and the volume of each investigation status.

Investigation Flow Widget

Adjust the DiagramπŸ”—

Select a filter chip from the top of the widget to remove or add that column in the visualization.

Adjust Investigation Flow Widget

Analyze the DiagramπŸ”—

Hover over a node or the path between nodes to view the count of applicable investigations.

The expanded view of the widget includes a table of the underlying investigations. From this view, select a node or path to filter the table below the widget to just those applicable investigations.

Analyze Investigation Flow Widget

Custom Widgets πŸ”—

For users opted in to Preview mode, custom widgets allow you to create visualizations of the data that matters to you. The custom widgets you create can be added to as many of your custom dashboards as you wish and are available to users in your tenant also opted in to Preview mode.

Notes on current limitations:

  • Custom widgets can only be added to custom dashboards found under My Dashboards from the Taegis Menu.
  • Only the user who created a custom widget or a Tenant Admin can edit or delete it, and any changes made are applied to every instance of the widget, wherever it appears.
  • Any user opted in to Preview mode in the tenant the widget was created in can see and use the custom widget.

We value your input on additional enhancements you would like to have available for use with Custom Widgets. See Submit a New Idea to add your input to our Product Roadmap.

Create a Custom WidgetπŸ”—

The data visualized by a custom widget is generated by an advanced search query. You can form a new query or use an existing query to create your widget from My Dashboards.

To create your custom widget:

  1. Open Dashboards from the Taegis Menu and choose My Dashboards.
  2. Select + Add Widget to open the Widget Library.
  3. Select Create New Widget to open the Widget Builder.

Widget Builder

The Widget Builder is divided into four collapsible sections. Follow the instructions in each of the following sections to create your custom widget.

To specify the data you would like to visualize with the widget:

  1. From the Specify Data with Search section of the Widget Builder, enter a search query or select an existing query from Search History or Saved Searches. You can use either the Query Language Editor or Builder by selecting the desired option from the top of the section.
  2. Select Search to execute the query and populate the Widget Preview with a visualization of the search results.

Widget Builder Search

Visualize the DataπŸ”—

A widget contains multiple properties that can be adjusted depending on the data you’d like to visualize.

Tip

The Widget Preview updates to allow for quick visual reference while configuring the widget. The preview uses the date range from your search query, but your completed widget will use the date range set for the entire custom dashboard, just as the predefined widgets do.

  1. Select the type of visualization to be used by the widget. The available options are:

    • Time Series (default) — Ideal for displaying data over time to identify trends, patterns, and anomalies; available as a bar, line, or area chart

    • Pie — Ideal for showing the proportional distribution of categories relative to a whole; available as a pie or donut chart

    • Horizontal Bar — Ideal for comparing quantities across different categories
    • Stacked Horizontal Bar — Ideal for comparing the total and component parts of different categories side by side
    • Grouped Horizontal Bar — Ideal for comparing multiple sub-categories across different main categories
    • Stacked Vertical Bar — Ideal for showing the total and breakdown of categories over time or across different groups (this visualization is used when you select Time Series with bar chart format and select a Group by field)
    • Big Number — Ideal for highlighting a single, important metric or key performance indicator at a glance

  2. Choose how to aggregate the search results in your chosen visualization and which field to aggregate by using the Aggregation drop-down menus. The available fields are dependent on the fields available in your search results.

  3. Choose a Group by option to define the data categories used by the visualization. The available fields are dependent on the fields available in your search results.
  4. Choose to Filter the results to a set amount like the top ten results by selecting the Show only box and choosing the desired filter and amount.

Widget Builder Visualize Data

Date Range OptionsπŸ”—

Currently, the widget will visualize data using the date range set for the entire custom dashboard, just as the predefined widgets do. Additional options will be available in a future release.

Name and DescriptionπŸ”—

  1. Enter the Title and Description that is used to identify the widget and its purpose in the Widget Library and on your dashboard.
  2. Enter an optional Footnote that displays below the widget visualization.

Complete the WidgetπŸ”—

Select Create Widget to save it to the Widget Library. You and other tenant users opted in to Preview mode can now add the custom widget to any of your custom dashboards.

Delete a Custom WidgetπŸ”—

The widget creator or a Tenant Admin can fully delete a custom widget, including all instances of its use on all tenant users’ custom dashboards. Follow these steps:

  1. Open Dashboards from the Taegis Menu and choose My Dashboards.
  2. Select + Add Widget to open the Widget Library.
  3. From the Widget Library, choose the Custom tab.
  4. Select the menu icon for the desired widget and select Delete.
  5. Select Yes, Delete to confirm you would like to permanently delete the custom widget and remove all instances of its use.

Tip

To remove an instance of the widget instead, see Remove a Widget.

Edit a Custom WidgetπŸ”—

The widget creator or a Tenant Admin can edit a custom widget, which affects all instances of its use on all custom dashboards. Follow these steps:

  1. Open Dashboards from the Taegis Menu and choose My Dashboards.
  2. Select + Add Widget, choose the Custom tab, and select the menu icon for the desired widget.
  3. Choose Edit to open the Widget Builder with the selected widget’s configuration populated.
  4. Make your desired changes and select Save Changes when complete.

Important

All instances of the widget on all tenant users’ custom dashboards will update to use the new configuration.

Duplicate a Custom WidgetπŸ”—

To create a new custom widget with an exact copy of a current custom widget’s configuration, follow these steps:

  1. Open Dashboards from the Taegis Menu and choose My Dashboards.
  2. Select + Add Widget to open the Widget Library.
  3. From the Widget Library, choose the Custom tab.
  4. Select the menu icon and choose Create a Copy.
  5. A new widget is added to the Custom tab of the Widget Library with (Copy) appended to the title to differentiate it from the original.
  6. Edit the widget to update the title and change the configuration as desired.

Expand a WidgetπŸ”—

For supported widgets, open an expanded view that includes a table of the underlying data by selecting the widget's Menu icon and choosing Expand, or by selecting the widget title.

Expand a Widget

Dashboard Sharing πŸ”—

Users opted in to Preview mode can now share their custom dashboards with other tenant users.

Dashboard Access LevelsπŸ”—

Your access level to custom dashboards shared with you by other tenant users varies depending on the permissions set when shared. Your level of access is displayed as a badge next to the dashboard name. Hover over the badge to view the dashboard owner’s name.

The following table details possible access levels and the included permissions.

Access Level Dashboard Permissions Sharing Permissions
Owner All actions available All actions available
Editor Can’t delete dashboard Can’t transfer ownership
Viewer Can’t delete, edit, or adjust dashboard Can’t remove own access; Can only grant Viewer access

Share a Custom DashboardπŸ”—

By default, access to new custom dashboards is restricted to the creator. To share a custom dashboard with other users in your tenant, select the Share button at the top of the page. You can update permissions at tenant-wide level affecting all tenant users and at an individual user level.

Once you have adjusted access to the dashboard, select Copy Link from the Share panel to share with users. The link itself does not have any access embedded, so only the users affected by your choices in the Share panel will be able to access the dashboard with the link.

Share Dashboard

NotificationsπŸ”—

Only users who have enabled the dashboard notification preference in their Profile & Settings will receive an in-app and email notification when they are initially granted access to a dashboard or when ownership of a dashboard is transferred to them.

Notifications are not sent for tenant-level access changes or when a user’s access level changes or is removed.

Share with TenantπŸ”—

To adjust the tenant-wide access permissions to a custom dashboard, follow these steps:

  1. Select the desired custom dashboard from the My Dashboards drop-down menu at the top left of the page.
  2. Select Share from above the dashboard.

  3. From the Tenant Member Access section of the Share panel, select the default Restricted level and choose the desired access level for all tenant users:

    • Restricted: Only users specified in the User Access section of the Share panel can access the dashboard.
    • Viewer: Any tenant member can view, duplicate, export, and share the dashboard for viewing.
    • Editor: In addition to Viewer access, any tenant member can edit and adjust the dashboard.

    Share with Tenant

  4. Select Save to save your changes and return to the Share panel and then choose Done.

Note

Users with Viewer permissions to a dashboard cannot adjust tenant-wide permissions.

Share with IndividualsπŸ”—

To adjust the individual user access permissions to a custom dashboard, follow these steps:

  1. Select the desired custom dashboard from the My Dashboards drop-down menu at the top left of the page.
  2. Select Share from above the dashboard.
  3. From the User Access section of the Share panel, begin typing a name in the Add Users field and then select the desired user from the list.
  4. Continue to add more users if desired.

  5. Choose the desired access level for the user(s) from the drop-down menu:

    • Viewer: Can view, duplicate, export, and share the dashboard for viewing
    • Editor: In addition to Viewer access, can edit and adjust the dashboard

    Share with Individuals

  6. Select Save to save your changes and return to the Share panel and then choose Done.

Important

User permissions override tenant-level permissions.

Note

Users with Viewer permissions to a dashboard can only grant Viewer access to other users.

Change or Remove AccessπŸ”—

To change another user’s access permissions to a custom dashboard or remove their access completely, follow these steps:

  1. Select the desired custom dashboard from the My Dashboards drop-down menu at the top left of the page.
  2. Select Share from above the dashboard.
  3. From the User Access section of the Share panel, select the permission drop-down menu for the desired user.
  4. Select the desired access level for the user or choose Remove Access and then confirm the action.
  5. The Share panel updates to reflect your changes. Select Done when complete.

Note

Users with Editor permissions can also change or remove their own access. Viewers cannot change or remove other users’ access, but can remove their own access.

Important

When an individual user's access is removed, the user still retains the permissions set tenant wide under Tenant Member Access. For example, if the Tenant Member Access for the dashboard is set to Viewer, and you remove an individual’s Editor User Access, that individual retains the Viewer permission set tenant wide.

Transfer OwnershipπŸ”—

To transfer ownership of a custom dashboard to another user, follow these steps:

  1. Select the desired custom dashboard from the My Dashboards drop-down menu at the top left of the page.

  2. Select Share from above the dashboard, and choose one of the following paths from the User Access section of the Share panel:

    1. Select the permissions drop-down menu for yourself, choose Transfer Ownership, and then enter the name of the user to transfer ownership to in the Choose a User field.
    2. Or, select the permissions drop-down menu for the desired user to transfer ownership to and choose Transfer Ownership.

  3. Choose the level of access you wish to have after transferring ownership.

  4. Select Transfer Ownership.

Note

Only the Owner of a dashboard can transfer ownership.

Customize a DashboardπŸ”—

Note

For users opted in to Preview mode, your ability to customize dashboards that have been shared with you by other users depends on your access level.

You can customize the following dashboard elements.

Customizing My Dashboard

Rename the DashboardπŸ”—

Select the title of the dashboard to give it a new name.

Edit the Dashboard LayoutπŸ”—

Select Edit Layout and choose your preferred layout view: One Column, Two Columns, or Three Columns.

Rearrange WidgetsπŸ”—

Drag and drop widgets to rearrange them as needed.

Remove a WidgetπŸ”—

Select the widget's Menu icon and choose Remove Widget to remove it from your dashboard.

Change Time FrameπŸ”—

Change the time frame of all widgets using the drop-down control at the top right of the dashboard. The default time period is the Last 7 Days, but choosing a custom time period overwrites it. The most recent time period selected becomes the new default.

Create One-Time ReportπŸ”—

Creating a Report from a Custom Dashboard

You can take a snapshot of the current custom dashboard in a PDF report. To generate a one-time PDF report from a custom dashboard:

  1. Customize the dashboard widgets as needed. All edits to the dashboard, including the name, date range, and order of the widgets are reflected in the report.
  2. Select More Options > Create One-Time Report.
  3. The report is generated. You will receive a notification when it is ready to download, or proceed to Reports from the Taegis Menu to watch its status.
  4. When the report is ready to download, open the Actions icon and select Download PDF.

Delete a Custom DashboardπŸ”—

Note

Users opted in to Preview mode must be a dashboard owner to delete a dashboard.

To delete a custom dashboard:

  1. Open the dashboard to display it.
  2. Select More Options > Delete Dashboard.
  3. Select Delete to confirm.

Delete Custom Dashboard

Export OptionsπŸ”—

Export Dashboard to PNGπŸ”—

To export the entire dashboard to a PNG image file, select Actions from the top right of the dashboard and choose Download as PNG. The file automatically downloads.

Export Dashboard to PNG

Export Dashboard DataπŸ”—

To export all data from the dashboard to a CSV or JSON file, select Actions from the top right of the dashboard and choose the Export Data CSV or JSON option.

Export Dashboard Data

Export Widgets to PNGπŸ”—

To export an individual widget to a PNG image file, select the vertical ellipsis from the top right of the desired widget and choose Download as PNG. The file automatically downloads.

Export Widget to PNG

Tip

You can also export the visuals resulting from expanding certain widgets to PNG.

Export Widget DataπŸ”—

To export widget data as a CSV or JSON file, select the vertical ellipsis from the top right of the desired widget and choose the Export Data CSV or JSON option.

Export Widget Data

Tip

You can also export the data from visuals resulting from expanding certain widgets to CSV or JSON.