- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
5 hours ago
Dear friends,
I run into a problem regarding breakdowns for automated indicators - performance analytics.
In my case, I would like to get out of table: sn_si_incident the field: priority and state. However, I cannot chose these fields because they are not in the list of fields I can chose. Is there another way to make this possible?
Kind regards
Pim van der Lecq
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
5 hours ago
Hi @pvanderlecq ,
Since sn_si_incident.priority and sn_si_incident.state are both choice fields, they should be available. If you cannot see them, it is likely a configuration issue with the breakdown source
- Create a Breakdown Source for State
- Navigate to Performance Analytics > Sources > Breakdown Sources.
- Click New.
- Name: State (or Security Incident State)
- Facts Table: Choice (sys_choice)
- Field: Sys ID
- Conditions:
- Table is sn_si_incident
- Element is state
- Language is en (or your platform's primary language)
- Inactive is false
- Click Submit.
- Create a Breakdown for State
- Navigate to Performance Analytics > Breakdowns > Automated Breakdowns.
- Click New.
- Name: Security Incident State
- Automated: Select the State breakdown source you just created.
- Click Submit.
- Create a Breakdown Mapping for State
- On the Security Incident State breakdown form, go to the Breakdown Mappings related list and click New.
- Facts Table: Security Incident (sn_si_incident)
- Field: State
- Scripted: Unchecked
- Breakdown: Security Incident State (already selected)
- Click Submit.
- Repeat the process for Priority
- Repeat steps 1-3 to create a breakdown source, breakdown, and breakdown mapping specifically for the Priority field on the sn_si_incident table.
- Add the breakdowns to your indicator
- Navigate to your automated indicator.
- In the Breakdowns related list, click Edit and add the new Security Incident State and Security Incident Priority breakdowns from the slushbucket.
- Click Save.
- Run data collection
If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !!
Thanks, GP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
5 hours ago
Hi @pvanderlecq ,
Since sn_si_incident.priority and sn_si_incident.state are both choice fields, they should be available. If you cannot see them, it is likely a configuration issue with the breakdown source
- Create a Breakdown Source for State
- Navigate to Performance Analytics > Sources > Breakdown Sources.
- Click New.
- Name: State (or Security Incident State)
- Facts Table: Choice (sys_choice)
- Field: Sys ID
- Conditions:
- Table is sn_si_incident
- Element is state
- Language is en (or your platform's primary language)
- Inactive is false
- Click Submit.
- Create a Breakdown for State
- Navigate to Performance Analytics > Breakdowns > Automated Breakdowns.
- Click New.
- Name: Security Incident State
- Automated: Select the State breakdown source you just created.
- Click Submit.
- Create a Breakdown Mapping for State
- On the Security Incident State breakdown form, go to the Breakdown Mappings related list and click New.
- Facts Table: Security Incident (sn_si_incident)
- Field: State
- Scripted: Unchecked
- Breakdown: Security Incident State (already selected)
- Click Submit.
- Repeat the process for Priority
- Repeat steps 1-3 to create a breakdown source, breakdown, and breakdown mapping specifically for the Priority field on the sn_si_incident table.
- Add the breakdowns to your indicator
- Navigate to your automated indicator.
- In the Breakdowns related list, click Edit and add the new Security Incident State and Security Incident Priority breakdowns from the slushbucket.
- Click Save.
- Run data collection
If I could help you with your Query then, please hit the Thumb Icon and mark as Correct !!
Thanks, GP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
4 hours ago
Check if breakdown sources exist for these fields for table 'sn_si_incident'. If not available, create breakdown sources and map the breakdowns in automated indicator and it should work.
Below is for reference
As per community guidelines, you can accept more than one answer as accepted solution. If my response helped to answer your query, please mark it helpful & accept the solution.
Thanks,
Bhuvan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2 hours ago
Thanks for marking the post as helpful.
As per community guidelines, you can accept more than one answer as accepted solution. If my response helped to guide you or answer your query, please mark it helpful & accept the solution.
Thanks,
Bhuvan