Sigma offers a one-click template to create presentation-ready dashboards displaying your Lacework data stored in Snowflake. Templated dashboards can be used to quickly dive into understanding your organization’s security metrics.
Summary of Content
- You must be an organization admin in Sigma.
- A Snowflake data warehouse connected to Sigma
- A Lacework account and Sharehouse connected to your Snowflake Warehouse. Learn more
- Your Lacework database must be named ‘LACEWORK’
Request a Lacework Sharehouse from Snowflake
To connect your Lacework account to your warehouse, open your Snowflake console and request a Lacework Sharehouse through Snowflake’s Data Marketplace.
Create a New Lacework SecOps Dashboard
If you have not already, request a Lacework Sharehouse from Snowflake.
Once you Lacework data is available in Sigma, navigate to your Sigma Home Page.
Under DASHBOARD TEMPLATES, select the Lacework SecOps template. This will open the Create a Dashboard from a Template modal.
First, you will need to select your data source to be used by the template. By default, Sigma will attempt to select the appropriate data source ( ie LACEWORK.DATA_SHARE ) .
If one more data source options are found, you will see the screen pictured below. Select your source and a location for your new dashboard. Then click 'Create'.
Please note: If Sigma is unable to match a source to your selected template, you will automatically be directed to manually select your source(s) from the Advanced Table Mapping View.
The remaining steps will walk you through the process of selecting data sources by means of the Advanced Table Mapping View.
First, select your desired connection and source tables from the provided lists.
Click Next to continue.
Now it is time to select a destination for your new Dashboard and its sources.
Select an existing folder or use the Create Folder button to create a new one. If you create a new folder, don’t forget to name and open it before continuing.
From here you will be routed directly to your new dashboard!