Monitor case response and closure metrics

This document explains how to measure case handling time in Google Security Operations using dashboards. You can track how long it takes to complete case-related processes, with breakdowns by attributes, such as stage or priority.

The following example demonstrates how to create a dashboard table widget that displays the average case handling times, by case priority, for analysts working in the default environment:

1. Go to SOAR Dashboards.
2. Click add Add Widget.
3. In the Widget Settings dialog, enter Case Handling Time as the Title, and then choose a widget width.
4. Under Chart Type, select Table (the default is Pie Chart).
5. Configure the Table settings as follows:
• Number of = Cases
• Calculate field = Handling avg time
• Axis A = Environment
• Axis B = Priority
6. Click Create. The new widget appears on the dashboard and shows the average time analysts take to handle cases in the default environment, grouped by case priority.