FortiSOAR Discussions
bolsec
New Contributor

Alert templates and related modules

Hello team!

 

I have a question related to the view templates of modules like Alerts or Incidents.

The question is how to display only the indicators related to a specific alert in my 'Card Tiles' widget.

I know it can be easily done using the 'Relationshiips *' widgets but that's not a case.

 

I tried to set up the 'Filter Criteria' of the widget by selecting Related Modules -> Alerts -> ID 's 'null'  = False - but that doesn't seem to work - I got all my indicators listed.

If I type a static Alert ID number - it works fine - only related to that alert id indicators are listed.

Dashboard templates has something called 'Configure Inputs' features but modules templates seem to not have that, so how can i make that value dynamic (alert ID) or maybe there's other way?

 

Regards.

 

 

1 REPLY 1
Echumba
New Contributor II

You need to edit your Alerts/Incidents template

i) Open any of your alerts in your alerts module, at the right top end there is an edit icon.

ii) Add a widget, inside the widget, add a new tab and call it Indicators

7.jpg

iii) Inside the same widget add another widget called called Relationships

    - Select relationship to Include Few and Module to include Indicators

     -Select relationship as Indicators and Click Settings icon, Enable row expansion and Add Description Column

8.jpg

Evans Chumba
Evans Chumba