SOC.OS is a valuable tool for MSSPs as well as individual SOC teams. In these circumstances, users will want to monitor any number of organisations, and quickly investigate the data with a consistent login. To facilitate this, SOC.OS provides Organisation switching.
If Organisation Switching is enabled in your user account, please see usage instructions below.
If your user has been set up with access to multiple organisations you will be able to use the Switch Organisation Button located on the top of the left side navbar.
The button contains a Jdenticon image generated from the organisation's identifier, each of these images are completley unique in both shape and colour for ease and clarity of recognition.
To switch organisations, click the button to bring up the organisations dropdown, and click on the option for your target organisation that you wish to investigate.
This will cause the current page to reload any data for the new active organisation, and this will remain as the active organisation until the user performs another switch or reloads the page.
Dashboards:
On any of the dashboards / wallboards, switching organisation will cause any on screen widgets to reload with the data from the new organisation. Since these pages do not require an organisation in the URL there will be no noticable difference outside of the data changes.
Workbench:
Switching organisation will reload the workbench with all of the clusters, alerts, and entities from the new organisation. It will also reload any list filters and default list filters, and remove any currently performed searches, loading instead the default query of the new organisation if one has been set by the user. The user may also notice that the organisation ID will have been updated in the URL.
Team list:
Switching organisation will reload the list with team members belonging to the new organisation. If you were viewing a specific user when switching organisation, you will be brought back to the team list for the new organisation. The user may also notice that the organisation ID will have been updated in the URL.
Settings pages:
Switching organisation on any of the settings pages will cause that page to reload with configuration data from the new organisation. The user will not be returned to the main settings menu and can continue on their desired settings page. The user may also notice that the organisation ID will have been updated in the URL.