Custom fragments injection points

Use custom fragment injection points to display custom information in QRadar®.

You add the injection point information to the app_name, page_id, and location fields in the fragments block in the manifest file. The following table lists the injection point locations that you use in the fragments block for each tab and page.

For some QRadar pages, HTML fragments can be injected at the top (header) or bottom (footer) of the page. If injection points are not specified in the injection point name, the content is injected at the top of the page (header). On the Admin tab, you can inject content at each section header.

The following table shows examples of custom fragments.

Table 1. Custom fragments injection point examples
Tab and page Sample manifest entry
Offenses > My Offenses header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "MyOffenseList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > My Offenses footer 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "MyOffenseList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > All Offenses > header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "OffenseList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > All Offenses footer 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "OffenseList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Category header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "CategoryTypeSummaryList",
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Source IP header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "AttackerList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Source IP footer 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "AttackerList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Destination IP header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "TargetList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Destination IP footer 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "TargetList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Network header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "NetworkList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > By Network footer 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "NetworkList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > Rules header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "RulesWizardExistingRules",
        "rest_endpoint": "/somerestendpoint"
    }
Offenses > Offense Summary header 

"fragments": [
    {
        "app_name": "SEM",
        "page_id": "OffenseSummary",
        "rest_endpoint": "/somerestendpoint"
    }
Assets > Asset Profiles header 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "AssetList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Assets > Asset Profiles footer 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "AssetList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Assets > Server Discovery header 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "ServerDiscovery",
        "rest_endpoint": "/somerestendpoint"
    }
Assets > VA Scan header 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "VaScannerSchedulesList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Assets > VA Scan footer 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "VaScannerSchedulesList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    }
Assets > Asset Profiles > Id > Asset Details dialog header 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "AssetDetailsVulnList",
        "location": "header"
        "rest_endpoint": "/somerestendpoint"
    }
Assets > Asset Profiles > Id > Asset Details dialog footer 

"fragments": [
    {
        "app_name": "Assets",
        "page_id": "AssetDetailsVulnList",
        "location": "footer"
        "rest_endpoint": "/somerestendpoint"
    },
Admin > System Configuration header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "systemConfiguration",
        "rest_endpoint": "/somerestendpoint"
    }
Admin > Data Sources header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "dataSources",
        "rest_endpoint": "/somerestendpoint"
    }
Admin > Remote Networks & Services Configuration header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "viewConfiguration",
        "rest_endpoint": "/somerestendpoint"
    }
Admin > Try it out header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "trialLicense",
        "rest_endpoint": "/somerestendpoint"
    }
Admin > Plug-ins header 

"fragments": [
    {
        "app_name": "QRadar",
        "page_id": "plugins",
        "rest_endpoint": "/somerestendpoint"
    }

The following table describes custom fragments injection points that are not included in the Custom fragments injection points examples table.

Table 2. Custom fragments injection points
Tab and page Injection point
Admin QRadar.allTabs
Asset Details dialog 
Assets.AssetDetailsVulnList.header

Assets.AssetDetailsVulnList.footer
Assets > Server Discovery 
Assets.ServerDiscovery
Dashboard 
QRadar.Dashboard
Log Activity 
EventViewer.EventList.header
EventViewer.EventList.footer
Network Activity 

Surveillance.FlowList.footer
Reports > All 
Reports.ReportTemplateListAll.header

Reports.ReportTemplateListAll.footer
Reports > Daily 
Reports.ReportTemplateListDaily.header

Reports.ReportTemplateListDaily.footer
Reports > Hourly 
Reports.ReportTemplateListHourly.header
Reports.ReportTemplateListHourly.footer
Reports > Manual 
Reports.ReportTemplateListManual.header
Reports.ReportTemplateListManual.footer
Reports > Monthly 
Reports.ReportTemplateListMonthly.header
Reports.ReportTemplateListMonthly.footer
Reports > Weekly 
Reports.ReportTemplateListWeekly.header
Reports.ReportTemplateListWeekly.footer
Risks > Configuration Monitor 
SRM.ConfigDeviceList
Risks > Connections 
QRadar.ArcList.header
QRadar.ArcList.footer
Risks > Policy Management > By Asset 
SRM.ByAssetList
Risks > Policy > By Policy 
SRM.ByPolicyList
Risks > Policy Management > By Policy Check 
SRM.ByPolicyCheckList
Risks > Policy Monitor 
SRM.MaintainQuestions
Risks > Simulation > Simulations 
SRM.SimulationList.header
SRM.SimulationList.footer
Risks > Simulation > Topology Models 
SRM.ModelList.header
SRM.ModelList.footer
Risks > Topology 
SRM.NetworkTopology
Vulnerabilities > Manage 
assetprofile.ByVulnerabilityInstanceList.header
assetprofile.ByVulnerabilityInstanceList.footer
Vulnerabilities > Manage > By Asset 
assetprofile.ByAssetListForm.header
assetprofile.ByAssetListForm.footer
Vulnerabilities > Manage > By Network 
assetprofile.ByNetworkList.header
assetprofile.ByNetworkList.footer
Vulnerabilities > Manage > By Open Service 
assetprofile.ByOpenServiceList.header
assetprofile.ByOpenServiceList.footer
Vulnerabilities > Manage > By Vulnerability 
assetprofile.ByVulnerabilityList.header
assetprofile.ByVulnerabilityList.footer
Vulnerabilities > My Assigned 
assetprofile
.MyAssignedVulnerabilitiesList.header
assetprofile
.MyAssignedVulnerabilitiesList.footer
Vulnerabilities > Research > Vulnerabilities 
assetprofile.ResearchVulnerabilityList.header
assetprofile.ResearchVulnerabilityList.footer
Vulnerabilities > Vulnerability Assignment 
assetprofile.AssetOwner.header
assetprofile.AssetOwner.footer
Vulnerabilities > Vulnerability Exception 
assetprofile.ExceptionRulesList.header
assetprofile.ExceptionRulesList.footer