About the Text Visualization Type

Use case

You can use the Text visualization to:

• Add instructions, descriptions, or reports about using different panels in the dashboard, leading to detailed and well-documented dashboards.

• Capture important contextual information or warning messages you must know to accurately use the dashboard, its workflows, or drilldown capabilities, to name a few.

• Share confidential banners that carry critical information intended for only certain groups of users, helping in dashboard user management.

• Embed images, code snippets, and hyperlinks to create highly informative dashboards that can support documentation and training purposes.

Panel Options

Use the options in the Panel tab to customize the options described in the following table.

Setting		Description
Settings	Panel title	Titles appear at the top of a panel.
	Description	Descriptions appear as tooltips. Markdown and links are supported.
	Transparent	Display panel without a background.

Field Options

Use the options in the Fields tab to customize the options described in the following table.

Setting		Description
Data links	Add link	Click +Add link and complete settings for link behavior when a user clicks data fields in the visualization. You can use the following URL types and configure them to pass variables: Relative URL – URL that will open a new Search page with a specified search query. URL in ThreatStream or Security Analytics domains – URL that will open a page or a specific object in ThreatStream or Security Analytics. To use a relative URL, specify /xdr/gf/m/a/?query= in the URL field, and then provide a search query. You can type a $ to display a list of variables that can be inserted into the query. To use a URL in ThreatStream or Security Analytics domains, do the following: Type a $ in the URL field to display a selection list of variables that can be inserted into the URL pattern, and then select Domains Threatstream or Domains Security Analytics. Using /, specify the page or a link to an object in ThreatStream or Security Analytics, and then click Save. In the example above, when a user clicks any part of the visualization, the Investigations page in ThreatStream will open.

Advanced Options

Use the options in the Advanced tab to override the settings configured in the Fields tab for particular fields. For example, you can override the automatic color palette selected for a particular field to a preferred single color.

You have the following options to select field settings to be overridden:

• Fields with name: Set properties for a specific field.

• Fields with name matching regex: Set properties for fields with names matching a regex.

• Fields with type: Set properties for fields with a specific type (numeric, string, Boolean).

• Fields returned by query: Set properties for fields from a specific query.

Once you add this visualization type to your dashboard, you can also manage your dashboard panels.

See Manage dashboard panels to learn more about how you can edit panel settings to modify the visualization and apply advanced transformations, share panels with permitted users in your organization, or even view the panel JSON model, and so on.

Support for Variables

The Markdown widget also supports dynamic variables on Anomali Match Dashboards. You can now insert both system-defined and custom variables into Markdown content, enabling the display of dynamic, context-sensitive information (for example, usernames, dates, alert counts) that updates automatically based on AQL data or user-defined inputs.

How to use variables

Variables can be inserted into your Markdown content using double curly braces:

${enter_your_variable_name}

When the widget is rendered, these placeholders are replaced with their corresponding values.

Adding a variable

See Adding Dashboard Variables to understand how you can add and configure variables.

Dynamic Usage of Variables

After Adding a variable on a dashboard, you can dynamically display their context-specific values as follows:

1. Click Edit on the dashboard.

2. Hover your mosue to the right of the Panel title and click the expander. Doing so displays the panel management menu.

3. Click Edit.

4. In the Content Editor, enter the dollar sign ($). This sign displays all the system and custom variables that you can use to dynamically display context-specific information. In the example below, we add variables for dcid, event time, sourcetype, and time range.

   

5. Click Save.

Once you complete these steps, the variable you added will be dynamically populated with its value(s), based on AQL data or user-defined inputs.