IBM Security QRadar SOAR

This morning our SOC got into SOAR and noticed the new incidents redesign. While it does continue to match the design changes, I wanted to bring up that it is much less friendly in our real-world instance. Some of our view presets must now be scrolled from left to right, and it's difficult to read any of the fields as they're almost all cut-off. I don't have a screenshot of what it looked like prior, I think it may have made them multiline and fields also took up less space and fit cleaner.

Has anyone else noticed this? Are there recommendations to making it look good? Is there room for feedback for future enhancements?


Here is what I opened up this morning:






Additionally, we've noticed that the actions dropdown here is virtually illegible/cutoff (each action shows 1-2 words). Closing incidents from this view is also tedious (super blocky, need to scroll through fields, fields not auto-populating).







------------------------------
Jared Fagel
Cyber Security Analyst I
Public Utility
------------------------------

I opened an Idea in January to improve the space utilization in new UI.
https://2e4ccba981d63ef83a875dad7396c9a0.ideas.aha.io/ideas/R-I-985

I also agree that some of these changes in UI can be highly improved.

------------------------------
Lucian Sipos
------------------------------

Original Message:
Sent: Mon August 30, 2021 11:29 AM
From: Jared Fagel
Subject: 'Incidents' View Redesign

This morning our SOC got into SOAR and noticed the new incidents redesign. While it does continue to match the design changes, I wanted to bring up that it is much less friendly in our real-world instance. Some of our view presets must now be scrolled from left to right, and it's difficult to read any of the fields as they're almost all cut-off. I don't have a screenshot of what it looked like prior, I think it may have made them multiline and fields also took up less space and fit cleaner.

Has anyone else noticed this? Are there recommendations to making it look good? Is there room for feedback for future enhancements?


Here is what I opened up this morning:






Additionally, we've noticed that the actions dropdown here is virtually illegible/cutoff (each action shows 1-2 words). Closing incidents from this view is also tedious (super blocky, need to scroll through fields, fields not auto-populating).







------------------------------
Jared Fagel
Cyber Security Analyst I
Public Utility
------------------------------

@Jared Fagel We also noticed these changes and are experiencing the same pains, particularly in the Incidents list view and the cut off dropdowns. Thanks for sharing, hopefully they address this.​

------------------------------
Michael L
------------------------------

Original Message:
Sent: Mon August 30, 2021 11:29 AM
From: Jared Fagel
Subject: 'Incidents' View Redesign

This morning our SOC got into SOAR and noticed the new incidents redesign. While it does continue to match the design changes, I wanted to bring up that it is much less friendly in our real-world instance. Some of our view presets must now be scrolled from left to right, and it's difficult to read any of the fields as they're almost all cut-off. I don't have a screenshot of what it looked like prior, I think it may have made them multiline and fields also took up less space and fit cleaner.

Has anyone else noticed this? Are there recommendations to making it look good? Is there room for feedback for future enhancements?


Here is what I opened up this morning:






Additionally, we've noticed that the actions dropdown here is virtually illegible/cutoff (each action shows 1-2 words). Closing incidents from this view is also tedious (super blocky, need to scroll through fields, fields not auto-populating).







------------------------------
Jared Fagel
Cyber Security Analyst I
Public Utility
------------------------------

Hi all,

Both the drop down menu cut offs, and some improvements around row real estate are being actively worked on and we'll update here with the release version details.

Please feel free to share any other feedback.

Sorry for the inconvenience and thanks for your patience.


------------------------------
Martin Feeney
Product Manager, IBM Security SOAR
martin.feeney@ie.ibm.com
Ireland
------------------------------

Original Message:
Sent: Tue September 28, 2021 09:18 AM
From: Michael L
Subject: 'Incidents' View Redesign

@Jared Fagel We also noticed these changes and are experiencing the same pains, particularly in the Incidents list view and the cut off dropdowns. Thanks for sharing, hopefully they address this.​

------------------------------
Michael L

Original Message:
Sent: Mon August 30, 2021 11:29 AM
From: Jared Fagel
Subject: 'Incidents' View Redesign

This morning our SOC got into SOAR and noticed the new incidents redesign. While it does continue to match the design changes, I wanted to bring up that it is much less friendly in our real-world instance. Some of our view presets must now be scrolled from left to right, and it's difficult to read any of the fields as they're almost all cut-off. I don't have a screenshot of what it looked like prior, I think it may have made them multiline and fields also took up less space and fit cleaner.

Has anyone else noticed this? Are there recommendations to making it look good? Is there room for feedback for future enhancements?


Here is what I opened up this morning:






Additionally, we've noticed that the actions dropdown here is virtually illegible/cutoff (each action shows 1-2 words). Closing incidents from this view is also tedious (super blocky, need to scroll through fields, fields not auto-populating).







------------------------------
Jared Fagel
Cyber Security Analyst I
Public Utility
------------------------------