Returns a table widget of enabled feed integration instances that errors out on indicators fetch.
Common Widgets
- Details
- Content
- Dependencies
- Version History
Frequently used widgets pack.
| Name | Description |
|---|---|
| FeedIntegrationErrorWidget | |
| WidgetNoOp | A no-op placeholder script used by visual-only widgets (e.g. Page Break, Text Widget) that require a script dataType but do not need to query any data source. Returns a mock result to prevent unnecessary database queries. |
| RSSWidget | Script Widget - RSS Feed. |
| MyToDoTasksWidget | A script that creates a table of all the ToDo tasks assigned to the current user. |
| Name | Description |
|---|---|
Detection SLA by Status | The detection SLA status of all incidents that their severity was determined. The widget takes into account incidents from the last 30 days by default, and inherits new time range when the dashboard time changes. |
Active vs Expired Indicators | |
Incidents By Close Reason | |
Incidents Dropped in Preprocessing | |
Task executions | Task executions |
Mean Time to Resolution (Occurred) | |
Late Incidents | |
Command executions per Incident Type | Command executions per Incident Type |
Remediation SLA by Status | The remediation SLA status of all incidents that started a remediation process. The widget takes into account incidents from the last 30 days by default, and inherits new time range when the dashboard time changes. |
Late SLA by Type | |
Server Memory Usage % (last 24h) | Server memory usage % (previous 24 hours) |
Indicators in Related Incidents | |
Return On Investment (ROI) | |
Feeds Errors | |
Incidents by Role | |
Most Active Integrations | |
Memory Usage % per Engine (last 24h) | Memory usage percentage per engine in the previous 24 hours |
My Messages | |
Failed Manual Tasks | Failed Manual Tasks |
Active Incidents Assigned by User | |
Executions by status per Manual Tasks (top 5) | Executions by status per Manual Tasks (top 5) |
Active Incidents - Pie chart | |
Mean Time to Triage | |
Top Users Closed Manual Tasks | Top Users Closed Manual Tasks |
Incidents Top Close Analysts | |
TopMaliciousRatioIndicators | Malicious Ratio indicator widget shows indicator that appear in high ration at bad incidents |
My Tasks | |
MTTD by Type | A widget that shows the Mean Time to Detection, by incident type. |
MTTR by Severity | |
Unassigned Pending Incidents | |
Closed By Dbot | Showing percentage of incidents handled and closed by DBot, without an owner being assigned to, across all incidents in the provided period |
MTTR by Type (in minutes) | Shows changes in Mean Time to Resolution (in minutes), over time, while differentiating between incident types. |
Elastic Disk Current Usage | Elastic Disk Current Usage % |
Within SLA by Type | |
Running playbooks | |
Unit 42 Blog Feed | |
MTTR by Type | Shows changes in Mean Time to Resolution (in hours), over time, while differentiating between incident types. |
Incident Severity by Type | |
Failed Automation executions per Incident Types (top 5) | Failed Automation executions per Incident Types (top 5) |
Command executions per Integration Category | Command executions per Integration Category |
Late Tasks | |
Indicators Activity | |
Command execution errors per Integration Category | Command execution errors per Integration Category |
Playbook run errors | Playbook run errors |
Top Active Playbooks | |
Elastic JVM Memory Current Usage | Elastic JVM Memory Current Usage % |
Unassigned Incidents | |
Unassigned Closed Incidents | |
Command execution errors per Instance | Command execution errors per Instance |
Memory Current Usage | |
Average runtime per Automation (top 5) | Average runtime per Automation (top 5) |
Errors by Incident Type per Command (top 5) | Errors by Incident Type per Command (top 5) |
MTTC by Severity | |
Unassigned Incidents | |
Server CPU Usage % (last 24h) | Server CPU usage in the previous 24 hours |
Average runtime by Instance per Command (top 5) | Average runtime by Instance per Command (top 5) |
CPU Usage % per Engine | Current CPU usage percentage per engine |
Mean Time to Detection | The mean time (average time) to detection across all incidents that their severity was determined. The widget takes into account incidents from the last 30 days by default. |
Active Incidents by Role | |
Least executed Commands per Instance | Least executed Commands per Instance |
MTTT by Severity | |
Disk Current Usage | |
Top 10 Attack Pattern Indicators in Related Incidents | |
Image | |
Disk Usage % per Engine (last 24h) | Disk usage percentage per engine in the previous 24 hours |
Indicators Activity by Type | |
Feed Integrations Errors | Feed integrations indicators fetch errors |
Open Tasks Per User | |
Relationship Generating Integrations | |
Least executed Commands | Least executed Commands |
SLA by Incident Type | |
Most Active Users | |
Manual Verdict Indicators by User | |
Workers per Engine | Current number of workers per engine |
Manual Command execution errors (top 5) | Manual Command execution errors (top 5) |
Failed Playbooks runs | Failed Playbooks runs |
Commands executed | Commands executed |
Incidents in Error Run Status | |
Incidents by Phase | |
CPU Usage % per Engine (last 24h) | CPU usage percentage per engine in the previous 24 hours |
Late Tasks by User | |
Text Widget | |
Average Incident Duration by Role (Avg) | |
Command executions errors | Command executions errors |
Active Indicators Volumes by Feed | |
Malicious Indicators Activity by Type | |
Disk Usage % per Engine | Current disk usage percentage per engine |
Tasks By State | |
Memory Usage % per Engine | Current memory usage percentage per engine |
Command execution errors | Command execution errors |
Command execution type | Command execution type |
Investigation Activity Timeline | |
Latest Messages | |
Busy Workers per Engine (last 24h) | Number of busy workers per engine in the previous 24 hours |
Active Indicators by Verdict | |
Busy Workers Count per Engine | Current number of busy workers per engine |
Executions by status per Automated Tasks (top 5) | Executions by status per Automated Tasks (top 5) |
Malicious Indicators Activity | |
Malicious/Suspicious Indicators in Incidents | |
Active Incidents - Line chart | |
Top executed Commands | Top executed Commands |
Incidents Occurred Per Day | |
Page Break Widget | Use the page break widget in a report to force a page break before the widgets that follow. |
MTTD by Severity | |
My ToDo Tasks | A widget that presents a table of all the ToDo tasks assigned to the current user. |
Top 10 File Indicators in Related Incidents | |
Important Messages | |
Playbook runs | Playbook runs |
MTTR Occurred by Type | |
Most Active Investigations | |
Incident Types by Severity | |
Average runtime by Incident Type per Playbook (top 5) | Average runtime by Incident Type per Playbook (top 5) |
Command average runtime per Instance (top 5) | Command average runtime per Instance (top 5) |
Late Incidents | |
Unassigned Active Incidents | |
Closed Incidents by Role | |
Mean Time to Containment | |
Average runtime per Playbook (top 5) | Average runtime per Playbook (top 5) |
Manual Verdict Indicators | |
Elastic CPU Current Usage | Elasticsearch CPU Current Usage % |
CPU Current Usage | |
Task execution errors | Task execution errors |
Average runtime for Playbooks | Average runtime for Playbooks |
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
| Pack Name | Pack By |
|---|
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Cortex REST API | By: Cortex XSOAR |
| Common Scripts | By: Cortex XSOAR |
Scripts
RSSWidget
- Updated the Docker image to: demisto/py3-tools:1.0.0.10120494.
MyToDoTasksWidget
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
WidgetNoOp
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
FeedIntegrationErrorWidget
- Updated the Docker image to: demisto/python3:3.12.13.10404775.
- 45017
Download
Scripts
New: WidgetNoOp
- Added a new no-op placeholder script used by visual-only widgets (e.g. Page Break, Text Widget) that require a script dataType but do not need to query any data source. Returns an empty result to prevent unnecessary database queries.
Widgets
Page Break Widget
- Changed the dataType from incidents to scripts and set query to WidgetNoOp to prevent unnecessary database queries against the incidents table when the widget is rendered.
Text Widget
- Changed the dataType from incidents to scripts and set query to WidgetNoOp to prevent unnecessary database queries against the incidents table when the widget is rendered.
- 43572
Download
PUBLISHER
PLATFORMS
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | June 30, 2020 | |
| Last Release | July 12, 2026 |
