Build a Custom Report

The Brinqa Platform comes prepared with various reports and dashboards built specifically for the needs of your organization. This tutorial serves to show how you can build your own custom report from scratch or modify existing reports. While this tutorial uses the Vulnerability data model in each report section, you can use a different data model or different report sections in your own report.

For an overview of the Brinqa report builder, see the Reports article.

This report example contains the following sections and pieces of data:

1.) Create the report

To create the report, follow these steps:

1. Navigate to Analytics.

2. Click Create and fill in the following fields:

   • Header: Provide a header for your report. For example, "Overview of Vulnerabilities."

   • Title: Provide a title for your report. For example, "Vulnerability Overview Report."

   • Name: The system fills in the name as you type the title, removing any spaces or characters that are not allowed. You do not need to edit this field.

   • Description: Provide a description for your report. For example, "Overview of vulnerabilities by risk rating, count, severity level, and age."

3. Click Save.

2.) Create a "total vulnerabilities by risk rating" section with drill-downs

You can use the Tabular section to display data from the data model in a table. Adding drill down to the section lets you navigate to the corresponding list view by clicking an entry in the table. For example, to display the current count of vulnerabilities grouped by their risk ratings, follow these steps:

1. Open the "Vulnerability Overview Report" and click Edit.

2. Click Add section and select Tabular .

3. Enter a title for the section. For example, "Total Vulnerabilities by Risk Rating".

4. For Data source, choose Vulnerability. This ensures the section pulls information from the Vulnerability data model.

5. For Measures, click +. A pane appears.

   • For Function, choose Count. This provides you with a count of all vulnerabilities.

   • Leave the Attribute field blank and leave the Display as field as is.

   • Click Update.

6. For Dimension, click +. A pane appears.

   • For Attribute, choose Risk rating. This groups the vulnerabilities by their risk rating.

   • Click Update.

7. For Sort by, click +. A pane appears.

   • For Attribute, choose Risk rating. This sorts the vulnerabilities by their risk rating.

   • For Direction, choose Descending. This sorts the vulnerabilities in descending order, starting with Critical.

   • Click Update.

8. Navigate to Style > Drill-down and click Create drill down. A new window appears.

   • Dimension drill-down allows you to set which column in the tabular to enable the drill down. For this example, enable Dimension drilldown.

   • From the Columns menu, select Risk rating.

   • From the On click menu, select Link to list view. More options appear below.

   • Select Open in a new tab if you want the drill down to open in a new tab.

   • Leave the default Parameters setting as is. {{riskRating}} means that the drill down changes dynamically depending on the risk rating. For example, when you click Critical, the drill down takes you to the list of critical vulnerabilities; when you click Medium, the drill down takes you to the list of medium vulnerabilities.

   • Include section filter in drill down parameters is selected by default. Since we have not set any filters, the values are empty and you can leave them as is.

   • Click Create.

   The "Total Vulnerabilities by Risk Rating" section appears on the report.

9. Click Update.

You can now click a risk rating in the table to navigate to all vulnerabilities with that specific risk rating. For example, click Critical to navigate to a list view of all critical vulnerabilities.

The following screenshot illustrates what the tabular section may look like:

3.) Create a "vulnerabilities found trend" section

You can use a line graph to display data that changes over time. When building a line graph, dimensions determine the X-axis, and measures populate the Y-axis. If you choose a line chart, at least one of your dimensions should be time-related.

To create a line chart showing vulnerabilities found each month, follow these steps:

1. Open the "Vulnerability Overview Report" and click Edit.

2. Click Add section and select Line .

3. Enter a title for the section. For example, "Vulnerabilities Found Trend".

4. For Data source, choose Vulnerability. This ensures the section pulls information from the Vulnerability data model.

5. For Measures, click +. A pane appears.

   • For Function, choose Count. This provides you with a count of all vulnerabilities.

   • Leave the Attribute field blank and leave the Display as field as is.

   • Click Update.

6. For Dimensions, click +. A pane appears.

   • For Attribute, choose First Found. The First found field is a timestamp, so you can select which part of the timestamp is relevant for the graph using the Transformation field.

   • From the Transformation menu, select Month of year, which shows the number of vulnerabilities by the month of the year in which they were found.

   • Click Update.

7. For Filter, click +. A window appears.

   • For Attribute, choose First found.

   • For Operator, choose In last.

   • For Number, type 12.

   • For Units, choose Months.

     The above settings filter the vulnerabilities by those that have been discovered in the last 12 months.

   • Click Update.

8. For Limit, click the drop-down and select 25. This limits the line chart to display 25 data points.

9. Navigate to Style > Color and choose Color by data point. This displays data points in different colors.

10. Navigate to Style > Options and choose Show value, Show grid lines, and Smooth lines. This makes the graph line less angular, displays grid lines, and displays the number of vulnerabilities per month.

11. The "Vulnerabilities Found Trend" section appears on top of the first section. Drag the section to a more desirable location in the report.

12. Click Update.

The following screenshot illustrates what the line chart section may look like:

4.) Create a "top 10 vulnerabilities" section

You can use a bar chart to display bars of data. Bar and Column charts can be used interchangeably, but bars may work better when the bar labels are long. When building a bar graph, dimensions determine the X-axis and measures determine what populates the Y-axis.

To create a bar graph showing the top 10 vulnerabilities, follow these steps:

1. Open the "Vulnerability Overview Report" and click Edit.

2. Click Add section and select Bar .

3. Enter a title for the section. For example, "Top 10 Vulnerabilities".

4. For Data source, choose Vulnerability. This ensures the section pulls information from the Vulnerability data model.

5. For Measures, click +. A pane appears.

   • For Function, choose Count. This provides you with a count of all vulnerabilities.

   • Leave the Attribute field blank and leave the Display field as is.

   • Click Update.

6. For Dimensions, click +. A pane appears.

   • For Attribute, choose Display name. This groups the vulnerabilities by their display names.

   • Click Update.

7. For Sort by, click +. A pane appears.

   • For Attribute, choose Count. This sorts the graph by vulnerability count.

   • For Direction, choose Descending. This sorts the graph in descending order, starting with the vulnerability with the highest count.

   • Click Update.

8. Navigate to Style > Colors and choose Color by data point. This displays data points in different colors.

9. Navigate to Style > Options and select Show value and Show grid lines. This displays grid lines and displays the number of vulnerabilities on the graph.

10. The "Top 10 Vulnerabilities" section appears on top of the first section. Drag the section to a more desirable location in the report.

11. Click Update.

The following screenshot illustrates what the bar chart section may look like:

5.) Create an "average vulnerability age" section

You can use a column chart to display data in columns. When building a column graph, dimensions determine the X-axis and measures determine what populates the Y-axis.

To create a column graph showing the average age of vulnerabilities, follow these steps:

1. Open the "Vulnerability Overview Report" and click Edit.

2. Click Add section and select Column .

3. Enter a title for the section. For example, "Average Vulnerability Age".

4. For Data source, choose Vulnerability. This ensures the section pulls information from the Vulnerability data model.

5. For Measures, click +. A pane appears.

   • For Function, choose Average. This provides you with an average value of the Age in days attribute.

   • For Attribute, choose Age in days.

   • Leave the Display as field as is.

   • Click Update.

6. For Dimensions, click +. A pane appears.

   • For Attribute, choose Risk rating. This groups the vulnerabilities by their risk rating.

   • Leave the Display as field as is.

   • Click Update.

7. For Sort by, click +. A pane appears.

   • For Attribute, choose Risk rating. This sorts the graph by risk rating.

   • For Direction, choose Descending. This sorts the graph in descending order, starting with the critical risk rating.

   • Click Update.

8. Navigate to Style > Color and choose Color by data point. This displays data points in different colors.

9. Navigate to Style > Vertical axis, type "Age in Days" for the Title, and select Display labels to ensure "Age in Days" displays on the axis.

10. Navigate to Style > Horizontal axis, type "Risk rating" for the Title, and select Display labels to ensure "Risk rating" display under the axis.

11. Navigate to Style > Options and select Show value and Show grid lines. This displays grid lines and displays the average age of vulnerabilities on the graph.

12. The "Average Vulnerability Age" section appears on top of the first section. Drag the section to a more desirable location in the report.

13. Click Update.

The following screenshot illustrates what the column chart section may look like:

6.) Apply an input to the report

You can add an input to the report, which enables you to dynamically filter the contents of the entire report without needing to add additional dimensions to each report section. For example, to add an input to the vulnerability report that can filter the vulnerabilities by their status, follow these steps:

1. Open the "Vulnerability Overview Report" and click Edit.

2. Click Inputs .

3. Click the Data model drop-down and choose Vulnerability.

4. Click More and select the Status attribute.

5. Click Apply.

6. Click the Status attribute and choose the status category you want to filter for. Options include Active, Fixed, Reopened, or Risk accepted. You can select multiple.

7. Click Apply and then Update to save your changes.

Your entire report updates displaying the graphs based on the vulnerabilities with the selected status category.