Reference List in chronicle custom dashboard

[Amyexplorer]

Hi team,

Please tell me if i can use reference list in chronicle custom dashboard? It's quite urgent. would appreciate your help on this.

@Jacqui_N 

Best regards

Emmie

[AymanC]

Hi,

If you're relating to the native dashboard capability (which utilises Looker Embedded), this is not something that i've seen is possible.

Kind Regards,

Ayman

[Amyexplorer]

Hi @AymanC , any alternative that i can think of here?

[AymanC]

Hi @Amyexplorer,

Unfortunately not that I am aware of. The new preview dashboard capabilities allows you to call reference lists - so may be something to look into. I believe this is in private preview, so you would have to speak to your account team on how to get access to this capability within your instance.

Kind Regards,

Ayman C

[deeshu]

Workaround- Ingest your list data to a custom csv feed.

[dlove40]

You could use the reference list in a simple detection rule, then build a dashboard around the detection events.