A ORadar administrator creates a new saved search in QRadar and wants to add the search to a dashboard, but the option "Include in my Dashboard" cannot be selected. What is a possible reason it is…

The correct answer is D. The user does not sufficient permissions. If the option "Include in my Dashboard" cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why: Permissions: The user needs appropriate permissions to add saved searches to the dashboard. Role-Based…

Reporting and Dashboarding

Question

A ORadar administrator creates a new saved search in QRadar and wants to add the search to a dashboard, but the option "Include in my Dashboard" cannot be selected. What is a possible reason it is unavailable?

Options

AThe search is not grouped.
BThe option is valid only for searches based on events.
CThe option is valid only for searches based on flows.
DThe user does not sufficient permissions.

How the community answered

(62 responses)

A
13% (8)
B
8% (5)
C
3% (2)
D
76% (47)

Explanation

If the option "Include in my Dashboard" cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why: Permissions: The user needs appropriate permissions to add saved searches to the dashboard. Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards. Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.

Topics

#dashboard#saved search#user permissions#security profile

Community Discussion

No community discussion yet for this question.

Full C1000-156 Practice