Skip to main content

Hello , i have a custom dashboard with lookml extention 
I want to know if there is any way to push it directly to chronicle dashboad ? or there is a way to convert from lookml to YAML ? 
thanks in advance

Chronicle has traditionally used Looker's underlying engine for its dashboarding functionality. However, it is a locked down version so it does not accept custom LookML within it. For users who are using the full Looker capabilities, they've always had to use their own Looker instance to leverage custom made LookML content.


That said, there are some things underway around using a new dashboarding capability within Google SecOps that aligns with rules and search. This dashboarding is still in private preview. I don't know of any plans to convert a custom LookML component to this new dashboard capability. That said, there is some work being done that as we get closer to general availability that there will be additional dashboard content including the default content that is included in Chronicle dashboarding today. If you are in need of something more specific or customized, I would recommend working with your customer engineer or support to see if there is a method available to convert the content you have.


This just went in to Public Preview today so there should be an opportunity for you to explore @Rached1996 


Reach out to your account team to see if they can enable for you. 


Reply