I’ve working in Yara-l. Is there any way to get more resources about native dashboard coz I’m confused on other features on doing that because they are different in looker dashboard this was a new to me. Please elaborate this.
Page 1 / 1
Hi -
Our native dashboards are still in preview. I’ll see if I can find anything for you but I don’t think the documentation is ready.
List of the public documents for features in Preview:
https://cloud.google.com/chronicle/docs/preview/
Nothing much on the Native Dashboard but only below latest API info on the Native Dashboard:
https://cloud.google.com/chronicle/docs/reference/rest/v1alpha/NativeDashboardView?hl=en
@thatsiemguy has a piece on a blog post showcasing the native dashboard -> https://medium.com/@thatsiemguy/automagic-json-parsing-e838ecda08c2
Essentially you craft a YARA-L 2.0 query, allowing you to create a chart, for example, a table. I would say personally utilising the preview features statistics and aggregations (https://cloud.google.com/chronicle/docs/preview/search/statistics-aggregations-in-udm-search) coupled with native dashboards allows you to create statistical and useful metrics presentable in a dashboard. As mentioned by @thatsiemguy, the native dashboards allow you to personalise your query, allowing you to utilise extracted fields (another preview feature), and easily use label key-value pairs (which were difficult in the looker dashboard) in your visualisation.
It is also worth noting, the additional YARA-L 2.0 functions (also in preview -> https://cloud.google.com/chronicle/docs/preview/detection-engine/yara-l-2-0-syntax) further bolster the capabilities of YARA-L 2.0 queries.
Hi -
Our native dashboards are still in preview. I’ll see if I can find anything for you but I don’t think the documentation is ready.
Alright, But is there anyway to call the reference list in the native dashboard. Coz, Native dashboard is almost same by creating a rule. I was thinking if its applicable to call the reference list in the native dashboard just like when we are creating use cases. Thank you
Hi -
Our native dashboards are still in preview. I’ll see if I can find anything for you but I don’t think the documentation is ready.
Thank you for answering my questions but Is there any way to call the reference list in the native dashboard coz, in creating use cases we call the reference list inside the rule. I was thinking if we can also apply it in the native dashboard/Preview Dashboard that we can call the reference list inside the Native Dashboard/Preview Dashboard?
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.