Skip to content

Commit 8a7ac3d

Browse files
sdaniel6sdaniel6
authored
CRTX-161093-Agentix-Automation-Dashboards-fix (demisto#42626)
* fixed missing dataset * added release notes
1 parent d1586ed commit 8a7ac3d

4 files changed

Lines changed: 24 additions & 14 deletions

File tree

‎Packs/CommonDashboards/ReleaseNotes/1_7_16.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
2+
#### XSIAM Dashboards
3+
4+
##### Troubleshooting Instances
5+
6+
- Updated the Troubleshooting Instances xsiam dashboard to use the scripts_and_commands_metrics dataset for improved metric accuracy.
7+
8+
##### Automation Insights
9+
10+
- Updated the Automation Insights xsiam dashboard to use the scripts_and_commands_metrics dataset for improved metric accuracy.

‎Packs/CommonDashboards/XSIAMDashboards/CommonDashboards_Automation_Insights.json‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@
8686
"title": "Automated vs manual actions",
8787
"width": 33.333333333333336,
8888
"height": 511,
89-
"phrase": "dataset = soar_execution_metrics\n| alter action_type = if(is_manual = true, \"Manual\", \"Automated\")\n| comp count() as action_count by action_type\n| sort desc action_count\n| view graph type = pie xaxis = action_type yaxis = action_count legend_percentage = `true` ",
89+
"phrase": "dataset = scripts_and_commands_metrics\n| alter action_type = if(is_manual = true, \"Manual\", \"Automated\")\n| comp count() as action_count by action_type\n| sort desc action_count\n| view graph type = pie xaxis = action_type yaxis = action_count legend_percentage = `true` ",
9090
"time_frame": {
9191
"relativeTime": 604800000
9292
},
@@ -130,7 +130,7 @@
130130
"title": "Incidents closed over time",
131131
"width": 33.333333333333336,
132132
"height": 511,
133-
"phrase": "dataset = incidents \n| filter resolved_ts != null and resolved_ts != \"\"\n| alter resolved_time = to_timestamp(resolved_ts)\n| bin resolved_time span = 1d\n| comp count() as closed_count by resolved_time, alert_categories\n| sort asc resolved_time\n| view graph type = line xaxis = resolved_ts yaxis = closed_count series = alert_categories ",
133+
"phrase": "dataset = incidents \n| filter resolved_ts != null\n| bin resolved_ts span = 1d\n| comp count() as closed_count by resolved_ts\n| sort asc resolved_ts\n| view graph type = line xaxis = resolved_ts yaxis = closed_count",
134134
"time_frame": {
135135
"relativeTime": 604800000
136136
},
@@ -207,7 +207,7 @@
207207
"type": "Custom XQL",
208208
"title": "Command executions per integration category",
209209
"height": 511,
210-
"phrase": "dataset = soar_execution_metrics\n| filter type = \"integration\"\n| filter category != null and category != \"\"\n| comp count() as exec_count by category\n| sort desc exec_count\n| view graph type = column subtype = grouped xaxis = category yaxis = exec_count ",
210+
"phrase": "dataset = scripts_and_commands_metrics\n| filter type = \"integration\"\n| filter category != null and category != \"\"\n| comp count() as exec_count by category\n| sort desc exec_count\n| view graph type = column subtype = grouped xaxis = category yaxis = exec_count ",
211211
"time_frame": {
212212
"relativeTime": 604800000
213213
},

‎Packs/CommonDashboards/XSIAMDashboards/CommonDashboards_Troubleshooting_Instances.json‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
"title": "Command execution errors per integration category",
1616
"width": 33.333333333333336,
1717
"height": 511,
18-
"phrase": "dataset = soar_execution_metrics\n| filter is_error = true\n| filter type = \"integration\"\n| filter category != null and category != \"\"\n| comp count() as error_count by category\n| sort desc error_count\n| view graph type = pie xaxis = category yaxis = error_count ",
18+
"phrase": "dataset = scripts_and_commands_metrics\n| filter is_error = true\n| filter type = \"integration\"\n| filter category != null and category != \"\"\n| comp count() as error_count by category\n| sort desc error_count\n| view graph type = pie xaxis = category yaxis = error_count ",
1919
"time_frame": {
2020
"relativeTime": 604800000
2121
},
@@ -47,7 +47,7 @@
4747
"title": "Command execution errors per instance",
4848
"width": 33.29688354291963,
4949
"height": 511,
50-
"phrase": "dataset = soar_execution_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| filter instance != null and instance != \"\"\n| comp count() as error_count by instance\n| sort desc error_count\n| view graph type = pie xaxis = instance yaxis = error_count ",
50+
"phrase": "dataset = scripts_and_commands_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| filter instance != null and instance != \"\"\n| comp count() as error_count by instance\n| sort desc error_count\n| view graph type = pie xaxis = instance yaxis = error_count ",
5151
"time_frame": {
5252
"relativeTime": 604800000
5353
},
@@ -79,7 +79,7 @@
7979
"title": "Command execution errors",
8080
"width": 33.406232914160746,
8181
"height": 511,
82-
"phrase": "dataset = soar_execution_metrics \n| filter is_error = true\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count\n| view graph type = pie xaxis = name yaxis = error_count ",
82+
"phrase": "dataset = scripts_and_commands_metrics \n| filter is_error = true\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count\n| view graph type = pie xaxis = name yaxis = error_count ",
8383
"time_frame": {
8484
"relativeTime": 604800000
8585
},
@@ -116,7 +116,7 @@
116116
"title": "Command execution errors",
117117
"width": 25,
118118
"height": 511,
119-
"phrase": "dataset = soar_execution_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| comp count() as error_count\n| view graph type = single subtype = standard yaxis = error_count ",
119+
"phrase": "dataset = scripts_and_commands_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| comp count() as error_count\n| view graph type = single subtype = standard yaxis = error_count ",
120120
"time_frame": {
121121
"relativeTime": 604800000
122122
},
@@ -148,7 +148,7 @@
148148
"title": "Manual command execution errors",
149149
"width": 25,
150150
"height": 511,
151-
"phrase": "dataset = soar_execution_metrics \n| filter is_error = true\n| filter is_manual = true\n| filter type = \"integration\"\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count\n| limit 5\n| view graph type = line xaxis = name yaxis = error_count ",
151+
"phrase": "dataset = scripts_and_commands_metrics \n| filter is_error = true\n| filter is_manual = true\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count\n| limit 5\n| view graph type = column xaxis = name yaxis = error_count ",
152152
"time_frame": {
153153
"relativeTime": 604800000
154154
},
@@ -179,7 +179,7 @@
179179
"type": "Custom XQL",
180180
"title": "Errors by issue type per command (Top 5)",
181181
"height": 511,
182-
"phrase": "dataset = soar_execution_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| filter api_response_type != null\n| alter command = name\n| comp count() as total_errors by command, category \n| sort desc total_errors \n| limit 5\n| view graph type = column subtype = grouped xaxis = category yaxis = total_errors series = command ",
182+
"phrase": "dataset = scripts_and_commands_metrics \n| filter is_error = true\n| filter type = \"integration\"\n| filter api_response_type != null\n| alter command = name\n| comp count() as total_errors by command, category \n| sort desc total_errors \n| limit 5\n| view graph type = column subtype = grouped xaxis = category yaxis = total_errors series = command ",
183183
"time_frame": {
184184
"relativeTime": 604800000
185185
},
@@ -225,7 +225,7 @@
225225
"title": "Failed automation executions (Top 5)",
226226
"width": 25,
227227
"height": 511,
228-
"phrase": "dataset = soar_execution_metrics\n| filter type = \"automation\"\n| filter is_error = true\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count \n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = error_count ",
228+
"phrase": "dataset = scripts_and_commands_metrics\n| filter type = \"automation\"\n| filter is_error = true\n| filter name != null and name != \"\"\n| comp count() as error_count by name\n| sort desc error_count \n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = error_count ",
229229
"time_frame": {
230230
"relativeTime": 604800000
231231
},
@@ -269,7 +269,7 @@
269269
"title": "Average runtime per command by instance (Top 5)",
270270
"width": 33.333333333333336,
271271
"height": 435,
272-
"phrase": "dataset = soar_execution_metrics\n| filter type = \"integration\"\n| filter duration != null\n| filter name != null and instance != null\n| comp avg(duration) as avg_runtime_secs by name, instance\n| sort desc avg_runtime_secs\n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = avg_runtime_secs series = instance ",
272+
"phrase": "dataset = scripts_and_commands_metrics\n| filter type = \"integration\"\n| filter duration != null\n| filter name != null and instance != null\n| comp avg(duration) as avg_runtime_secs by name, instance\n| sort desc avg_runtime_secs\n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = avg_runtime_secs series = instance ",
273273
"time_frame": {
274274
"relativeTime": 604800000
275275
},
@@ -315,7 +315,7 @@
315315
"title": "Command average runtime per instance (Top 5)",
316316
"width": 33.333333333333336,
317317
"height": 435,
318-
"phrase": "dataset = soar_execution_metrics\n| filter type = \"integration\"\n| filter duration != null\n| filter instance != null and instance != \"\"\n| comp avg(duration) as avg_runtime_secs by instance\n| sort desc avg_runtime_secs \n| limit 5\n| view graph type = column subtype = grouped xaxis = instance yaxis = avg_runtime_secs ",
318+
"phrase": "dataset = scripts_and_commands_metrics\n| filter type = \"integration\"\n| filter duration != null\n| filter instance != null and instance != \"\"\n| comp avg(duration) as avg_runtime_secs by instance\n| sort desc avg_runtime_secs \n| limit 5\n| view graph type = column subtype = grouped xaxis = instance yaxis = avg_runtime_secs ",
319319
"time_frame": {
320320
"relativeTime": 604800000
321321
},
@@ -354,7 +354,7 @@
354354
"title": "Command average runtime per automation (Top 5)",
355355
"width": 33.333333333333336,
356356
"height": 435,
357-
"phrase": "dataset = soar_execution_metrics\n| filter type = \"automation\"\n| filter duration != null\n| filter name != null and name != \"\"\n| comp avg(duration) as avg_runtime_secs by name\n| sort desc avg_runtime_secs \n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = avg_runtime_secs ",
357+
"phrase": "dataset = scripts_and_commands_metrics\n| filter type = \"automation\"\n| filter duration != null\n| filter name != null and name != \"\"\n| comp avg(duration) as avg_runtime_secs by name\n| sort desc avg_runtime_secs \n| limit 5\n| view graph type = column subtype = grouped xaxis = name yaxis = avg_runtime_secs ",
358358
"time_frame": {
359359
"relativeTime": 604800000
360360
},

‎Packs/CommonDashboards/pack_metadata.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"name": "Common Dashboards",
33
"description": "Frequently used dashboards pack.",
44
"support": "xsoar",
5-
"currentVersion": "1.7.15",
5+
"currentVersion": "1.7.16",
66
"author": "Cortex XSOAR",
77
"url": "https://www.paloaltonetworks.com/cortex",
88
"email": "",

0 commit comments

Comments
 (0)