The Logic behind Widgets on XDR

NivedaR — Mon, 19 Sep 2022 12:08:11 GMT

Hello ,

Recently we observed that during time period of last 7 days when we use the widget Incidents by source it shows us of a total 7 incidents but when we check manually with the same timeframe it shows us only 6 overall incidents. How does this widget accumulate its data.

Same case for the alerts there is a difference in total number with the same widget.

Re: The Logic behind Widgets on XDR

neelrohit — Mon, 19 Sep 2022 12:34:43 GMT

Hi @NivedaR ,

Thank you for writing to Live Community!

If I understand it correctly, you are trying to compare the numbers of incidents generated for the last 7 days using the widget versus the number of incidents you see on the incidents table.

The widget shows you the number of incidents generated during a specific timeframe selected(24h/7d/30d), while the incident table has additional filter that is status of the incidents. Out of the incidents generated within the timeframe, there is a possibility some might have been resolved and hence, does not list down. I would request you to check by removing all filters and just use incidents in the last 7days and match it with your widget data.

Hope that answers your question.

Regards,

topic Re: The Logic behind Widgets on XDR in Cortex XDR Discussions

The Logic behind Widgets on XDR

Re: The Logic behind Widgets on XDR