topic How to change Dashboard Widget Date Range from occurred to closed date in Cortex XSOAR Discussions

How to change Dashboard Widget Date Range from occurred to closed date

jboyd98 — Tue, 19 Apr 2022 19:37:20 GMT

Looking at some of my widgets on my dashboard, i noticed there is a date range filter. But is there a way to specify to use the closed date and not the occurred date?

Re: How to change Dashboard Widget Date Range from occurred to closed date

sramesh-7 — Wed, 20 Apr 2022 05:31:02 GMT

Hi,

May be you can mention the closed date in the widget query with other conditions-sample query - status:closed closed:>="2022-01-01T00:00:00 +0800"

Re: How to change Dashboard Widget Date Range from occurred to closed date

jboyd98 — Wed, 20 Apr 2022 15:02:20 GMT

Thanks, but with a line graph widget it won't plot against the day closed. The x-axis is the date occurred. I want the x-axis to be the date closed.

I'd like to be able to see a line graph of the cases closed by analyst where the date on the x-axis is the date closed.

Re: How to change Dashboard Widget Date Range from occurred to closed date

jfernandes1 — Wed, 20 Apr 2022 22:45:29 GMT

Hi @jboyd98, this is currently not supported since it would break some platform components.

- Incidents are partitioned based on the created date field. Partitions are opened and loaded into memory based on the created range.

- Every incident has a created date field by design. This results in fewer dashboard and widget errors.

There is a Feature Request for the same. https://xsoar.ideas.aha.io/ideas/FR-I-1117. I would recommend that you still vote and comment on it since your point about plotting field might still be valid.

Thanks,

Jeremy.