Measure how long security analysts take to close or raise a case

Google Security Operations allows building processes for cases and measuring the time it takes to complete them based on a variety of options such as stage or priority.

In the following example, you create a table widget on the dashboard that shows the average case handling times for analysts working in the Default Environment, based on case priority:

1. Navigate to the SOAR Dashboards page. Click add Add Widget. The Widget Settings dialog box opens.
2. In the Title field, type Case Handling Time and then choose a required widget width.
3. Select Table from the menu on the top left side of the dialog box.
4. Select the following information from the menus beneath Table.
• Number of = Cases
• Calculate field = Handling avg time
• Axis A = Environment
• Axis B = Priority
5. Click Create.
6. The table widget is displayed on the dashboard with the average case handling times for analysts working in the Default Environment, based on case priority.