QRadar Incident Overview app

Use the Incident Overview app to visualize offenses that are recorded by QRadar.

After you install the Incident Overview app, click Incident Overview on the Offenses tab to open the interactive Recent Incidents window. You must have QRadar administrator privileges to access and use the Incident Overview app. The Incident Overview app works best when you disable your browser's pop-up blocking feature.

• Each bubble in the Recent Incidents bubble graph represents an offense. Offense magnitude is indicated by the size and color of the bubble. The larger the bubble the greater the magnitude of the offense. The Incident Overview app works best when it displays 50 incidents or less.
• Click a sector in the Incidents by Magnitude pie chart to display incidents of that magnitude only in the Recent Incidents bubble graph. Click the sector a second time to turn off the filter.
• Click a column in the Top Categories bar chart to display incidents of that category only in the Recent Incidents bubble graph. Click the column a second time to turn off the filter.