Custom dasboard "Alerts by attack chain"

InsightIDR Alerts
1

Hi, I’m trying to create a custom dashboard like the “Alerts by attack chain”
image
in the home page, the purpose of this is change the time, by default is 28 days but I want a custom range, Is there any way to change this or create a custom dashboard to see the alerts in a custom range of time?

Thanks in advance

2

Hi Rembrandt,

Thanks for your enquiry.

I am afraid changing that day range isn’t possible today however have you looked at the Security Operations Activity dashboard (https://docs.rapid7.com/insightidr/monitor-your-security-operations-activities/#monitor-your-security-operations-activities)? From there you have the ability to change the granularity of your data.

3

I think the only way to really see it quickly is to change the date in the investigations page. Then you can see the numbers “Alert by attack chain” section. Not pretty but it will give you the numbers for whatever range you want.

image

1 Like