Configure Risk Score widgets for modern dashboards
Display Risk Score on a modern dashboard.
The Risk Score template widget displays the weighted arithmetic mean of node scores (CVE scores). The mean uses severity as the weight:
- Critical - 5
- High - 3
- Medium - 1
- Low - 0.5
- None - 0
Default SWQL query for Risk Score widgets
SELECT TOP 1 (CASE WHEN SystemScore = -1 THEN 0 ELSE SystemScore END) as SystemScore FROM Orion.SecObs.Vulnerabilities.Matchings WHERE EndTime IS NOT NULL AND Status = 3 ORDER BY EndTime DESC
Step 1: Configure the widget title and refresh rate
In the panel on the left, you can type a title and description for the widget. The default title is Risk Score. You can keep default values for all boxes in this section.
-
In Presentation, expand Title and Description.
-
Provide the title and subtitle.
-
If you want to have a link with other information about the widget, provide it in the Widget link URL.
-
You can also provide a description that might help others to reuse the widget.
-
You can also set how often you want data in the widget to refresh. See Refresh rate.
-
To make the widget header hidden by default, select the Collapsible box. To expand the header on the widget, click the line on the top of the widget. To hide the header again, click the arrow signs.
-
In Presentation, expand Refresh.
-
To disable the refresh, click the Refresh widget periodically slider.
-
By default, the widget is refreshed every 45 seconds. To change the refresh rate, click the Custom refresh slider and configure how often the widget should be refreshed.
-
Step 2: Configure data for the widget
Each value is displayed as a chart within a box. Specify what the box displays and add labels.
To add another data box, click Add new value and repeat the steps for Value 1.
-
In Value 1, expand Description to add labels for the value.
-
Provide a label and the minimum and maximum values.
-
To add another, floating label, ensure that the Use Float Label slider is enabled and provide the label text.
-
You can also add a description to explain what the widget shows.
-
-
Expand Data Model to change what the widget shows.
Using the graphical query builder
-
Select Use the graphical query builder and click Edit.
-
Select an entity and click Next.
- On Edit tabular data model, drag the database columns you want to see in the widget.
- Select Show advanced entities and properties.
- Find properties you want to see in the output and drag them to the Columns field.
- Reorder the columns if necessary (drag and drop).
- If you want to only show specific entities, specify a filter.
In Model preview, see what your model returns.
In Advanced, check the SWQL query built based on your input and expand Query performance to find out how long it took for the query to be executed and how many rows were returned.
- Click Save model.
Check your model:
Manually
-
Select Hand-edit a SWQL Query and click Edit.
-
Type your SWQL query.
-
Click Validate query to identify possible mistakes.
-
Click Show records to find out whether the query returns requested results.
-
-
If you are content with the results, click Save model and then click Save Changes.
-