Use the Gemini Case summary widget

Supported in:

The Gemini Summary widget looks at the whole case (alerts, events, and entities) and provides an AI-generated case summary of how much attention the case might require. The widget also summarizes alert data to provide better threat insights, and recommends next steps for effective remediation.

You can provide feedback on the accuracy and usefulness of the AI's classification, summary, and recommendations.

The Gemini Summary widget appears under the Case Overview tab in the Cases page. If there's only one alert in the case, you need to click the Case Overview tab to see this widget.

The Gemini Summary widget isn't displayed for cases that are created manually or request cases that are initiated from Your Workdesk.

Provide feedback for Gemini Summary

To provide feedback for Gemini Summary, complete the following steps:

  1. If the results are acceptable, click the thumbs up icon. You can add more information in the Additional Feedback field.

  2. If the results are not as expected, click the thumbs down icon. Select one of the options provided and add any additional relevant feedback.

  3. Click Send Feedback.

Remove Gemini Summary

The Gemini Summary widget is included in the default view.

To remove the Gemini Summary widget from the default view, complete the following steps:

  1. Go to SOAR Settings > Case Data > Views.

  2. Select Default Case View from the left-side panel.

  3. Click delete Delete on the Gemini Summary widget.

Need more help? Get answers from Community members and Google SecOps professionals.