Skip to main content

Hi All

How fast is Google SecOps' Gemini Summary? 

When a case was first created and a summary is generated, the speed at which Gemini Summary is generated varies depending on the situation, ranging from as fast as 1 minute to over 5 minutes. Is this normal? How about others?

Also, why does Gemini not generate a summary immediately when a case is created, but instead requires the user to click to perform the summary? If Gemini generated the summary immediately, we wouldn't have to worry about this.

 

Regards. 

Hi ​@JoshepKoh , in this scenario have you reported your findings to customer support yet?  Here are some ideas for looking at this:

 

The Gemini case summary widget is only generated for certain types of cases (more detail here), but it sounds like you’re describing a scenario where the widget is there as expected but doesn’t actually generate a summary until you manually kick off the operation.  Am I understanding the issue?

 

When this happens, is the behavior the same across multiple refreshes of the screen?  What about multiple submissions of the same type of case?  Do they all not automatically generate a Gemini Summary, or does the behavior vary?

 

For the time it takes to generate the summary, there can be variance depending on characteristics of the case, processing time by Gemini, and other practical factors.  


As you note, AI summary happens when you open a case, however it shouldn’t take 5 minutes, please talk to your rep/support about this.

 

<unqualified comment, I might be wrong> Lots of cases/alerts in SOAR are full automation end to end to close, so running AI on *everything* would be pointless.  There is however an Action “Create Gemini Case Summary” in the integration “Siemplify” that you could build into the playbook relevant to make sure it’s always done in preparation ready for you.  I suggest you put it later in the playbook.