Dashlet with tabular output

[SajjadShahid]

Hi,

I am new to NetWitness; in my dashboard, how can I have a dashlet showing a tabular output just like we have when testing a rule and selecting tabular format?

Thanks in advance,

[JohnKisner]

Currently there is no way to produce the type of dashlet you are looking for. The tabular data you are looking for only comes from reports and dashlets currently can not be used to display reports. All it can do is show you a listing of recently ran reports. From here you can click on the report that you want and view the last run of that report. This may provide you with the same information you are looking for but it will require an extra step of opening the report.

[SajjadShahid]

Thanks for the reply, John.

One more related question, how can I sort the results in ascending order using Investigation Top Values dashlet (as it shows results in descending order).

I have tried query below but it did not work ..

ioc exists order by count(country.src) asc

Thanks

[MohdSaadKhan]

You don't need to write asc in query as while creating rule below there is an option for selecting the value/meta in ascending and descending order, you can use that.

[SajjadShahid]

Thanks for your reply, Saad, but Investigation Top Values dashlet does not reference the rule.
The only thing it lets you enter is 'Query' where we enter something like 'ioc exists ..'.
I am getting meta values (example below) displayed in dashlet but in descending order (as per count) .. I want to sort these in ascending order.

abc (5555), xyz (4444) ..