sdl-dashboard

Creates, edits, and deploys Singularity Data Lake dashboards with JSON and Python validation.

59|30|Updated Aug 19, 2025
One-click install
npx skills add https://github.com/Sentinel-One/ai-siem --skill sdl-dashboard
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sdl-dashboard
Source: https://github.com/Sentinel-One/ai-siem/tree/main/plugins/s1-secops-skills/skills/sdl-dashboard
Command: npx skills add https://github.com/Sentinel-One/ai-siem --skill sdl-dashboard

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires sdl-api, powerquery, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill solves the problem of creating, editing, deploying, and debugging SentinelOne Singularity Data Lake (SDL) dashboards, simplifying the process of visualizing and analyzing data for security and operational insights.

Core Features & Use Cases

  • Dashboard Creation: Author and design custom SDL dashboards from single panels to multi-tab SOC dashboards.
  • Data Visualization: Supports all panel types (line, bar, pie, table, number, timeline, honeycomb, markdown) with performance rules for query optimization.
  • Deployment: Deploy dashboards to the SDL tenant using the sdl-api skill's put_file method.
  • Validation: Validate dashboards using the validate_dashboard.py script and generate evidence reports for review and auditing.

Quick Start

Use the sdl-dashboard skill to deploy a new dashboard based on the provided JSON file 'dashboard.json'.

Frequently Asked Questions about sdl-dashboard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create and deploy a SentinelOne Singularity Data Lake dashboard?

You can create and deploy a Singularity Data Lake dashboard by authoring the dashboard JSON, validating it with the provided Python script, and deploying it using the sdl-api skill's put_file method to push the file to your SDL tenant.

What panel types are supported for data visualization in SDL dashboards?

SDL dashboards support line, bar, pie, table, number, timeline, honeycomb, and markdown panel types for security operations data visualization, allowing you to design everything from single panels to complex multi-tab SOC dashboards.

How do I validate an SDL dashboard before deployment?

You validate an SDL dashboard by running the validate_dashboard.py Python script, which checks your dashboard configuration for errors and generates an evidence report for review and auditing prior to deployment.

Do I need the sdl-api and powerquery skills to manage SDL dashboards?

Yes, the sdl-dashboard skill requires collaboration with the sdl-api skill to handle the actual file deployment to the tenant, and the powerquery skill to assist with the underlying query optimization and schema discovery.

Can I debug Singularity Data Lake dashboards using automated scripts?

Yes, the sdl-dashboard skill automates the process of dashboard validation and evidence generation using Python scripts, enabling you to debug configurations and verify schema discovery before finalizing your deployment.

What is the best way to design a multi-tab SOC dashboard for SentinelOne?

The best way to design a multi-tab SOC dashboard is to utilize the schema discovery feature, apply query optimization performance rules, and author the complete layout in a JSON file before validating and deploying it.

Related Skills