Overview

Siemplify enables you to track and analyze every aspect of your security operation using Advanced Reports which synchronize with Tableau, the world’s leading data visualization software.
This integration with Tableau provides you with complete visibility and control over your security operation and a clear view of its business aspects.

Creating Users to see Advanced Reports

  1. In the Siemplify platform, navigate to Settings > Organization > User Management
  2. Create/Edit a user with the following levels of access to Advanced Reports according to your requirements:
    • No Access
    • Viewer – this level of user will only be able to see Tableau reports that were specifically shared with them from the Advanced Reports screen in the Siemplify platform.
    • Editor – this user can see all the Tableau reports. They can also upload reports and share reports.
  3. Make sure to Save.

Marketplace Advanced Reports

Once Siemplify has been set up, you can navigate to the Marketplace > Analytics tab to download out of the box reports. Once you have downloaded them, you will be able to view them from the Reports tab.

Below are examples of some of the the out-of-the-box reports Siemplify have defined for you:

Security Posture and Sensors Performance
This report provides clear visibility to threat status and trends over time. It also provides insights into sensors’ performance trends and false-positive metrics, thereby providing actionable insights for sensors’ tuning and improvement.

Playbook Analysis
This report provides metrics for automation performance and helps you understand how automation improves your SOC performance and reduces handling times.

Performance Analysis – Handling times
This report presents the mean time to detect and resolve metrics for alerts and cases, on multiple cohorts such as teams, alert types, and stages, and provides visibility to your SOC performance.

Performance Analysis – Analysts Workload
This report provides a clear view of your SOC’s workload via alerts and events distributions, open vs closed cases’ trends, alert grouping performance over time, and false positive trends.

Customer Report
This report is aimed to give MSSP customers visibility to their security services status, security posture, and important events on a regular basis.

Viewing Reports

  1. Navigate to the Reports tab and click on Advanced Reports.
  2. On the left side you will see a list of available Reports that you have downloaded from the Marketplace.
  3. Let’s take a look at the MSSP Monthly Report as an example.
  4. At the top of the report several buttons are displayed which are embedded Tableau functionality and as such will only carry out actions seen in Tableau. As such, Siemplify only recommends using the embedded Download and Refresh buttons.

Share Reports

  1. At the top of each screen on the right is the option to share reports using the Share icon
  2. Click Share
  3. Select the environments for the reports that you want to share with Siemplify users of those environments.
  4. If you want to share the reports with users who have view only access, make sure to select the checkbox.

Deleting Reports

Reports can only be deleted on the Tableau dashboard.

Getting Help

At the top of your dashboard is a question mark icon which leads you to Tableau documentation and support.
For more information please refer to Siemplify Tableau Deployment

Need more help with this?
Click here to open a Support ticket

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.