Build a custom dashboard - Build customized dashboards to display and filter the information that is most relevant to you. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Build customized dashboards to display and filter the information that is most relevant to you.

Build customized dashboards to display and filter the information that is most relevant to you. You can build custom dashboards based on predefined dashboard templates, or you can build a new dashboard from scratch.

By default, all new custom dashboards are Restricted and visible only to you (the Owner). Once created, you can use the Dashboard Manager to share the dashboard with specific users or groups, or make it Public to all authorized users.

  1. Select Dashboards & ReportsDashboard ManagerNew Dashboard, or in the Dashboard Manager right-click an existing dashboard and select Save as new.

  2. In the Dashboard Builder, under Dashboard Name, enter a unique name for the dashboard.

  3. Under Dashboard Type, choose a built-in dashboard template or a blank template, and click Next.

  4. (Optional) Change the toggle to Real Data to see how the dashboard looks with actual data from your environment.

  5. Add widgets to the dashboard. From the Widget Library, drag widgets on to the dashboard.

    Note

    • For agent-related widgets, you can apply an endpoint scope to refine the displayed data to only show results from specific endpoint groups. Select the menu on the top right corner of the widget, select Groups, and select one or more endpoint groups.

    • For case-related widgets, you can refine the displayed data to only show results from cases that match a case starring configuration. A purple star indicates that the widget is displaying only starred cases. For more information, see Case starring.

    • Custom graphs and charts generated by the Cortex Agentic Assistant and saved to the Widget Library can then be applied it to your dashboard from the Widget Library. For more information, see Use natural language to query and visualize your data.

  6. (Optional) Configure fixed filters and inputs.

  7. (Optional for dashboards with custom XQL widgets) Configure dashboard drilldowns.

  8. Under Time Range, set a time range for your dashboard.

    By default, the widgets use the dashboard timeframe. You can change the widget timeframe from the widget menu.

  9. When you have finished customizing your dashboard, click Next.

  10. (Optional) To set the custom dashboard as your default view when logging in, select Define as default dashboard.

  11. Click Generate to complete your dashboard.