Template Management

Template Management Access

To access the template management page, select Settings in the top menu. In the left panel, select Templates. A page opens that shows a list of all created templates and the Add template button.

Create a Template

  • In the top menu, select Settings. In the left panel, select Templates.

  • Click the Add template button. A new entry is added at the end of the template list.

Copy a Template

  • In the top menu, select Settings. In the left panel, select Templates.

  • Click the icon for the template you want to copy. A copy of the template is made, with the text string “[Copy] - “ prepended to its name.

To edit a template created by Cytomic, you must first copy it. You cannot directly edit a template created by Cytomic.

Delete a Template

  • In the top menu, select Settings. In the left panel, select Templates.

  • Click the icon for the template you want to delete. A confirmation dialog box opens.

Publish a Template

  • In the top menu, select Settings. In the left panel, select Templates.

  • Click the drop-down menu. Select Published.

After you publish a template, it can be accessed by all of the MSSP/MDR vendor/SOC accounts. If the template is Not Published, it can be accessed only by the analyst account that created it.

Edit a Template Attributes

  • To edit the name, tags, or description of a template, click the attribute and enter the new value.

  • In the case of tags, a drop-down menu appears that shows all available tags. To create a new tag, enter its value in the Tags field. The new tag is added to the drop-down menu for all created templates.

Edit a Template Content

Click the template. The notebook content opens. After you have edited the content, click the button in the notebook toolbar, or press Ctrl+s.

Create a Notebook from a Template

To launch the wizard for creating a notebook based on a template:

  • In the top menu, select Investigations. Create a new investigation, or select the investigation for which you want to create the notebook. For more information about investigations and how to create them, see Manage Investigations.

  • In the toolbar, click the icon. Select Automated investigation. A dialog box opens. Select the template you want to base the notebook on.

    • Use the Search text box to select the tags that will serve as filters to find a specific template. When you click the text box, a drop-down menu opens that shows all available tags. After you select a tag, it acts as first-level filter. Select more tags successively to set second, third, and more level filters.

    • If the template requires parameters, a dialog box opens that shows the names of the parameters and the data type you are expected to specify. See Use Parameters in Templates and Quick Answers.

After you complete the wizard steps, the console takes these actions:

  • Creates a new notebook with the contents of the template and the selected parameters.

  • Assigns the collected values to the notebook variables in the first cell, so that the analyst does not need to know the names of the variables.

  • Automatically includes a Context_params variable in semicolon-delimited CSV format. This variable contains the content of the associated indicator and its headers.