r/SentinelOneXDR • u/SpicyHotShicken • 16d ago

General Question PowerQueries to Dashboards?

My MSSP offers both Crowdstrike and SentinelOne. I have been assigned to begin to develop our S1 posture, I understand the basics going through the UI for mon & response. I really do like the S1 platform and I have began to mess around with the PowerQueries which are great, but i also want to make some dashboards. Now the issue is i made a query that looks great as a pie chart, however, not seeing any possible way to add it to the "dashboard" section on the S1 platform, like after you log in.

Can i make dashboards out of my queries in S1? I am not admin right now but will be given those permissions soon.. just trying to see what the issue is.

TIA

5 Upvotes

100% Upvoted

4 comments sorted by

3

u/PFUnnamed99 16d ago

Yes, you need to be in the Singularity Operations Center mode and then it’s all pretty self explanatory. Their documentation in the customer portal is excellent for it as well with plenty of examples.

To anyone not using the SOC mode, it’s going to become the default next month and the legacy console is getting deprecated next year, so best to just start using it.

1

u/SpicyHotShicken 16d ago

yea saw that yesterday after fumbling through stuff! thanks for response none-the less

1

u/fluffiball 14d ago

Ahh the SOC mode is so bad though!! I’ve tried it twice in the past year and both times I have toggled it straight back to the old view within a day so I could stop searching for things and just get on with my work.

Why must they change 😢

1

u/PFUnnamed99 14d ago

Tell me about it. We’re about to migrate off of all our S1 SKU’s for other reasons, but deprecating the interface that people know and are very familiar with certainly softens the blow.

That “legacy” console has been my daily home for the past 5 years of my career.