Template Management
Template Management Access
To access the template management page, select Settings in the top menu. In the left panel, select Templates. A page opens that shows a list of all created templates and the Add template button.
Create a Template
-
In the top menu, select Settings. In the left panel, select Templates.
-
Click the Add template button. A new entry is added at the end of the template list.
Copy a Template
-
In the top menu, select Settings. In the left panel, select Templates.
-
Click the
icon for the template you want to copy. A copy of the template is made, with the text string “[Copy] - “ prepended to its name.
To edit a template created by Cytomic, you must first copy it. You cannot directly edit a template created by Cytomic.
Delete a Template
-
In the top menu, select Settings. In the left panel, select Templates.
-
Click the
icon for the template you want to delete. A confirmation dialog box opens.
Publish a Template
-
In the top menu, select Settings. In the left panel, select Templates.
-
Click the drop-down menu. Select Published.
After you publish a template, it can be accessed by all of the MSSP/MDR vendor/SOC accounts. If the template is Not Published, it can be accessed only by the analyst account that created it.
Edit a Template Attributes
-
To edit the name, tags, or description of a template, click the attribute and enter the new value.
-
In the case of tags, a drop-down menu appears that shows all available tags. To create a new tag, enter its value in the Tags field. The new tag is added to the drop-down menu for all created templates.
Edit a Template Content
Click the template. The notebook content opens. After you have edited the content, click the button in the notebook toolbar, or press
Ctrl+s
.
Create a Notebook from a Template
To launch the wizard for creating a notebook based on a template:
-
In the top menu, select Investigations. Create a new investigation, or select the investigation for which you want to create the notebook. For more information about investigations and how to create them, see Manage Investigations.
-
In the toolbar, click the
icon. Select Automated investigation. A dialog box opens. Select the template you want to base the notebook on.
-
Use the Search text box to select the tags that will serve as filters to find a specific template. When you click the text box, a drop-down menu opens that shows all available tags. After you select a tag, it acts as first-level filter. Select more tags successively to set second, third, and more level filters.
-
If the template requires parameters, a dialog box opens that shows the names of the parameters and the data type you are expected to specify. See Use Parameters in Templates and Quick Answers.
-
After you complete the wizard steps, the console takes these actions:
-
Creates a new notebook with the contents of the template and the selected parameters.
-
Assigns the collected values to the notebook variables in the first cell, so that the analyst does not need to know the names of the variables.
-
Automatically includes a Context_params variable in semicolon-delimited CSV format. This variable contains the content of the associated indicator and its headers.