SOAR Widgets

[ISOL]

Can someone help confirm widget functionality and challenges?

1. Questions - Is 1 Month the last 30 days or the last calendar Month?

2. Is setting custom dates in dashboard a feature request? Seems odd we can't do it. 

3. When creating widgets, we are not able to specifically exclude tags. When defining the settings, some values are preselected, which may not be what we are looking for.  It would be great to statically choose which tags we want to see or exclude tags we don't want to see. 

[Kyle_M]

Hi @ISOL 

Thanks for your question! 

1. 1 month is 30 days in the dashboards.  There's a similar question in the community that breaks the times down further: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Exact-Time-Frame-of-Dashboard-and-Reports-in-SOA...

2. Custom dates at not possible in dashboards. This would need to be a feature request.

3. You can select any tag in the system to include.  The widget settings query the top 15, but you can search for others.  We don't offer a way to exclude tags, so that would need to be a feature request if needed.

Another option to consider is using Advanced Reports.  They offer more data and more control over the types of filters you can use. https://cloud.google.com/chronicle/docs/soar/monitor-and-report/soar-reports/using-advanced-reports-...