Measure how long security analysts take to close or raise a case

Supported in:

Google Security Operations allows building processes for cases and measuring the time it takes to complete them based on a variety of options such as stage or priority.

In the following example, you create a table widget on the dashboard that shows the average case handling times for analysts working in the Default Environment, based on case priority:

  1. Navigate to the SOAR Dashboards page. Click add Add Widget. The Widget Settings dialog box opens.
  2. In the Title field, type Case Handling Time and then choose a required widget width.
  3. Select Table from the menu on the top left side of the dialog box.
  4. Select the following information from the menus beneath Table.
    • Number of = Cases
    • Calculate field = Handling avg time
    • Axis A = Environment
    • Axis B = Priority
  5. Click Create.
  6. The table widget is displayed on the dashboard with the average case handling times for analysts working in the Default Environment, based on case priority.