Measure how long security analysts take to close or raise a case

Supported in:

Google Security Operations allows building processes for cases and measuring the time it takes to complete them based on a variety of options such as stage or priority.

In the following example, you create a table widget on the dashboard that shows the average case handling times for analysts working in the Default Environment, based on case priority:

  1. Navigate to the SOAR Dashboards page. Click add Add Widget. The Widget Settings dialog box opens.
  2. In the Title field, type Case Handling Time and then choose a required widget width.
  3. Select Table from the menu on the top left side of the dialog box.
  4. Select the following information from the menus beneath Table.
    • Number of = Cases
    • Calculate field = Handling avg time
    • Axis A = Environment
    • Axis B = Priority
  5. Click Create.
  6. The table widget is displayed on the dashboard with the average case handling times for analysts working in the Default Environment, based on case priority.

Need more help? Get answers from Community members and Google SecOps professionals.