Dear Team,

I create a custom search by using filter i.e. Low Level Category is Admin Login Failure and I have grouped by username and sourceip and left all the column as it is. I am able to get the result in search but the same thing is not populated when specified as a dashboard widget.

Please help me in creating custom dashboard.

Regards,

Do you have time series for the chart enabled? When you edit a chart, there is a graph settings gear icon that allows you to edit the graph. If you select Time Series it should display.

Also, is this in the Pulse App or are you using the legacy Dashboard. If you are not using Pulse, you should add this app as it gives a lot more graphing flexibility.

https://www.ibm.com/docs/en/qradar-common?topic=app-time-series-charts-in-qradar-pulse

Hello Jonathan,

Thanks for your prompt reply. I am using legacy dashboard. I have not enabled time series. I just saved the search using Low Level Category is Admin Login Failure and I have grouped by username and sourceip and left all the column as it is. In log activity, the chart is being populated but when I use the same search in dashboard, I am not getting any result. I have tried enabling time series but also I could not get the result.

I want to just plot the chart that I have seen in the log activity without any time series.

Best Regards,

Ishwor Shrestha