# How to track cases in a dashboard?

**URL:** https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259
**Category:** SIEM
**Created:** [October 21, 2021, 7:28am UTC](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259 "2021-10-21T07:28:00Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![christos.nasikas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christos.nasikas/32/45611_2.png) [@christos.nasikas](https://discuss.elastic.co/u/christos.nasikas)
#### Post date: [November 1, 2021, 10:36am UTC](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259/2 "2021-11-01T10:36:49Z")

</div>

Hi @elasticfran,

The "add lens" feature allows you to add dashboards in Cases. It was introduced in 7.15.

At the moment is not possible to create a dashboard from within Cases. It is in our roadmap to support it in the future. There is a way to do it using the `.kibana` system index. Be aware that  
the data structures of a system index may not be very "dashboard friendly" and they are subject to change in the future.

Steps:

1. Go to Stack Management -\> Index Patterns.
2. Click to Create index pattern and check Include system and hidden indices.
3. Put as Index pattern name `.kibana_<your_version>` . You don't want to inlude `.kibana-task-manager` and `.kibana-event-log`
4. Select `@timestamp` or `updated_at` as the time field.
5. Go to Analytics -\> Dashboard -\> Create visualization
6. Select your index pattern
7. Adjust your time range to include the cases you want.
8. On the Available fields you can search for cases fields. To visualize open, in progress, closed cases use the `cases.status` field. For new cases the `cases.created_at` field etc.

 ![Screenshot 2021-11-01 at 12.35.46 PM](https://us1.discourse-cdn.com/elastic/original/3X/9/3/9335fcbc64cd56cafeb23c05386696afc01fcade.png)

1. Drag and drop the field to the visualization area (on the right). You should be able to see some visualizations.

 ![Screenshot 2021-05-17 at 3.39.41 PM](https://us1.discourse-cdn.com/elastic/original/3X/d/e/de2a33a3eb7ecb2496047a5414f6952f41ce0226.png)

Let me know if you need any help.

Reference: [SIEM created and closed cases report - #8 by christos.nasikas](https://discuss.elastic.co/t/siem-created-and-closed-cases-report/270931/8)

Best,  
Christos

---

_[View the full topic](https://discuss.elastic.co/t/how-to-track-cases-in-a-dashboard/287259)._