Dashboards unable to filter on Case Closure Dates

Question

We currently export all case data via IDE script to Power BI. Now custom fields are available in Dashboards I want to bring our reporting into Secops. However I see a huge issue.

1) Dashboards doesn’t expose case closure date/time.
2) The dashboard time filter selector is creation date/time.

So it is an impossibility to do the most basic things like “show me how many cases were closed last week”.

What am i missing please as i just don’t believe such a basic requirement isn’t possible without using a legacy report or script.

thanks

Jamie

cmorris · Answer

You can use case_history to get closure time. Sample result:

Sample query:

$id = $h.case_history.case_response_platform_info.case_id
$id = $c.case.response_platform_info.response_platform_id
$name = $c.case.display_name
$status = $c.case.status
$status = "CLOSED"
$env = $c.case.environment
$create_date = timestamp.get_timestamp($c.case.create_time.seconds)
$name != "Moved Alert"

match:
    $id, $name, $status, $env, $create_date

outcome:
    $case_close_time = max(if($h.case_history.case_activity = "CLOSE_CASE", $h.case_history.event_time.seconds, 0))
    $close_date = timestamp.get_timestamp($case_close_time)
    $ttc_days = math.round((($case_close_time - min($h.case_history.event_time.seconds)) / 86400), 2)

order:
    $id desc

unselect:
    $case_close_time

Sign up

Login with SSO

Login to the community

Login with SSO