Returns a table widget of enabled feed integration instances that errors out on indicators fetch.
Common Widgets
- Details
- Content
- Dependencies
- Version History
Frequently used widgets pack.
| Name | Description |
|---|---|
| FeedIntegrationErrorWidget | |
| MyToDoTasksWidget | A script that creates a table of all the ToDo tasks assigned to the current user. |
| WidgetNoOp | A no-op placeholder script used by visual-only widgets (e.g. Page Break, Text Widget) that require a script dataType but do not need to query any data source. Returns a mock result to prevent unnecessary database queries. |
| RSSWidget | Script Widget - RSS Feed. |
| Name | Description |
|---|---|
Command execution type | Command execution type |
MTTR by Severity | |
Unassigned Incidents | |
Incidents by Role | |
CPU Usage % per Engine | Current CPU usage percentage per engine |
Busy Workers per Engine (last 24h) | Number of busy workers per engine in the previous 24 hours |
Active Incidents by Role | |
Incidents Dropped in Preprocessing | |
Task executions | Task executions |
Mean Time to Resolution (Occurred) | |
CPU Usage % per Engine (last 24h) | CPU usage percentage per engine in the previous 24 hours |
Mean Time to Detection | The mean time (average time) to detection across all incidents that their severity was determined. The widget takes into account incidents from the last 30 days by default. |
Top 10 Attack Pattern Indicators in Related Incidents | |
MTTR Occurred by Type | |
Page Break Widget | Use the page break widget in a report to force a page break before the widgets that follow. |
Least executed Commands | Least executed Commands |
Active Incidents - Pie chart | |
Most Active Integrations | |
Memory Current Usage | |
Manual Command execution errors (top 5) | Manual Command execution errors (top 5) |
Late SLA by Type | |
Average runtime for Playbooks | Average runtime for Playbooks |
Remediation SLA by Status | The remediation SLA status of all incidents that started a remediation process. The widget takes into account incidents from the last 30 days by default, and inherits new time range when the dashboard time changes. |
Unassigned Pending Incidents | |
Failed Manual Tasks | Failed Manual Tasks |
CPU Current Usage | |
Manual Verdict Indicators | |
MTTD by Severity | |
Commands executed | Commands executed |
Active Incidents Assigned by User | |
Command executions per Incident Type | Command executions per Incident Type |
Mean Time to Containment | |
Image | |
Incidents Occurred Per Day | |
Incident Types by Severity | |
Top Active Playbooks | |
MTTC by Severity | |
Elastic CPU Current Usage | Elasticsearch CPU Current Usage % |
Unit 42 Blog Feed | |
Tasks By State | |
Malicious/Suspicious Indicators in Incidents | |
MTTD by Type | A widget that shows the Mean Time to Detection, by incident type. |
Indicators Activity | |
Incidents in Error Run Status | |
Open Tasks Per User | |
SLA by Incident Type | |
Command executions errors | Command executions errors |
Mean Time to Triage | |
Closed Incidents by Role | |
Feeds Errors | |
Average runtime per Playbook (top 5) | Average runtime per Playbook (top 5) |
Active Indicators by Verdict | |
Most Active Users | |
Command average runtime per Instance (top 5) | Command average runtime per Instance (top 5) |
Unassigned Incidents | |
Late Incidents | |
Elastic JVM Memory Current Usage | Elastic JVM Memory Current Usage % |
Unassigned Closed Incidents | |
Malicious Indicators Activity by Type | |
Incidents Top Close Analysts | |
Server Memory Usage % (last 24h) | Server memory usage % (previous 24 hours) |
Average runtime per Automation (top 5) | Average runtime per Automation (top 5) |
Workers per Engine | Current number of workers per engine |
Active vs Expired Indicators | |
Malicious Indicators Activity | |
Incidents By Close Reason | |
Command execution errors | Command execution errors |
Manual Verdict Indicators by User | |
Busy Workers Count per Engine | Current number of busy workers per engine |
Executions by status per Automated Tasks (top 5) | Executions by status per Automated Tasks (top 5) |
Closed By Dbot | Showing percentage of incidents handled and closed by DBot, without an owner being assigned to, across all incidents in the provided period |
Errors by Incident Type per Command (top 5) | Errors by Incident Type per Command (top 5) |
Least executed Commands per Instance | Least executed Commands per Instance |
Command execution errors per Instance | Command execution errors per Instance |
Text Widget | |
Return On Investment (ROI) | |
Elastic Disk Current Usage | Elastic Disk Current Usage % |
Relationship Generating Integrations | |
My Messages | |
Running playbooks | |
Disk Current Usage | |
Top 10 File Indicators in Related Incidents | |
Top executed Commands | Top executed Commands |
Feed Integrations Errors | Feed integrations indicators fetch errors |
TopMaliciousRatioIndicators | Malicious Ratio indicator widget shows indicator that appear in high ration at bad incidents |
Playbook run errors | Playbook run errors |
MTTR by Type | Shows changes in Mean Time to Resolution (in hours), over time, while differentiating between incident types. |
Failed Automation executions per Incident Types (top 5) | Failed Automation executions per Incident Types (top 5) |
Unassigned Active Incidents | |
Most Active Investigations | |
Detection SLA by Status | The detection SLA status of all incidents that their severity was determined. The widget takes into account incidents from the last 30 days by default, and inherits new time range when the dashboard time changes. |
Active Indicators Volumes by Feed | |
Within SLA by Type | |
Failed Playbooks runs | Failed Playbooks runs |
Disk Usage % per Engine | Current disk usage percentage per engine |
Latest Messages | |
Average runtime by Incident Type per Playbook (top 5) | Average runtime by Incident Type per Playbook (top 5) |
Important Messages | |
Disk Usage % per Engine (last 24h) | Disk usage percentage per engine in the previous 24 hours |
Command execution errors per Integration Category | Command execution errors per Integration Category |
Memory Usage % per Engine | Current memory usage percentage per engine |
Task execution errors | Task execution errors |
Memory Usage % per Engine (last 24h) | Memory usage percentage per engine in the previous 24 hours |
Indicators Activity by Type | |
Indicators in Related Incidents | |
Active Incidents - Line chart | |
Investigation Activity Timeline | |
Executions by status per Manual Tasks (top 5) | Executions by status per Manual Tasks (top 5) |
Incidents by Phase | |
Average Incident Duration by Role (Avg) | |
Late Tasks | |
Average runtime by Instance per Command (top 5) | Average runtime by Instance per Command (top 5) |
Incident Severity by Type | |
Command executions per Integration Category | Command executions per Integration Category |
MTTT by Severity | |
MTTR by Type (in minutes) | Shows changes in Mean Time to Resolution (in minutes), over time, while differentiating between incident types. |
Late Tasks by User | |
Late Incidents | |
Server CPU Usage % (last 24h) | Server CPU usage in the previous 24 hours |
My Tasks | |
My ToDo Tasks | A widget that presents a table of all the ToDo tasks assigned to the current user. |
Playbook runs | Playbook runs |
Top Users Closed Manual Tasks | Top Users Closed Manual Tasks |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|---|
| Common Scripts | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
Scripts
RSSWidget
- Updated the Docker image to: demisto/py3-tools:1.0.0.10120494.
MyToDoTasksWidget
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
WidgetNoOp
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
FeedIntegrationErrorWidget
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
- 45017
Download
Scripts
New: WidgetNoOp
- Added a new no-op placeholder script used by visual-only widgets (e.g. Page Break, Text Widget) that require a script dataType but do not need to query any data source. Returns an empty result to prevent unnecessary database queries.
Widgets
Page Break Widget
- Changed the dataType from incidents to scripts and set query to WidgetNoOp to prevent unnecessary database queries against the incidents table when the widget is rendered.
Text Widget
- Changed the dataType from incidents to scripts and set query to WidgetNoOp to prevent unnecessary database queries against the incidents table when the widget is rendered.
- 43572
Download
PUBLISHER
PLATFORMS
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | June 30, 2020 | |
| Last Release | October 11, 2026 |
