This document explains how to measure case handling time in Google Security Operations using dashboards. You can track how long it takes to complete case-related processes, with breakdowns by attributes, such as stage or priority.
The following example demonstrates how to create a dashboard table widget
that displays the average case handling times, by case priority, for analysts
working in the default environment:
Go to SOAR Dashboards.
Click
add
Add Widget.
In the Widget Settings dialog, enter Case Handling Time as the Title, and then choose a widget width.
Under Chart Type, select Table (the default is Pie Chart).
Configure the Table settings as follows:
Number of = Cases
Calculate field = Handling avg time
Axis A = Environment
Axis B = Priority
Click Create. The new widget appears on the dashboard and shows the average time analysts take to handle cases in the default environment, grouped by case priority.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eGoogle Security Operations allows the measurement of case completion times for security analysts.\u003c/p\u003e\n"],["\u003cp\u003eCase handling time can be measured based on various factors like stage or priority within Google Security Operations.\u003c/p\u003e\n"],["\u003cp\u003eA table widget can be created within the SOAR Dashboards to display average case handling times.\u003c/p\u003e\n"],["\u003cp\u003eThe table widget can show the number of cases, calculate average handling time, and segment by environment and priority.\u003c/p\u003e\n"]]],[],null,[]]