Learn more about predefined dashboards, which are out-of-the-box dashboards providedby Palo Alto Networks.
Cortex XDR provides predefined dashboards that display widgets tailored to the dashboard type. The dashboards can help you monitor different aspects of your environment. To access your default dashboard, select Dashboards & Reports → Dashboard. From the dashboard header, a drop-down menu lists all available predefined and custom dashboards. The available dashboards depend on your license type.
Since predefined dashboards are system-managed and cannot be edited or deleted, you can create your own copy of a dashboard by selecting Save as new. This allows you to edit the widgets and configuration from your own custom version while preserving the original one.
Since these dashboards are provided directly by Palo Alto Networks, they follow a standard access model:
Always Public: These dashboards are always Public and visible to all authorized users. Unlike custom dashboards, you do not need to manage a list of who can see them.
Role permissions: Your visibility and access to these dashboards are set by your administrator through your user role. If you are unable to view specific dashboards or perform certain actions, contact your administrator to ensure your role permissions are configured correctly.
Data scoping: While the dashboard structure is public, the data you see within the widgets is automatically filtered based on your authorized data scope. For example, you will only see information for the asset groups you are permitted to view.
Dashboard name | Description |
|---|---|
Agent Management | Provides an overview of the deployed agents in your organization, their statuses and content versions, and a breakdown by OS type. |
AI Security | The Cortex Cloud AI Security overview dashboard serves as the central hub for information on the AI ecosystem within the organization. It provides a comprehensive overview of AI security posture and is designed to help users quickly access relevant information. The layout and organization of the dashboard are tailored to guide you in understanding the AI environment and determining the next steps to take for effective AI governance. For more information, see What is Cortex Cloud AI Security?.What is Cortex Cloud AI Security? NoticeRequires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. |
API security Management | Provides an overview of your API security landscape. You can view all the information and statistics applicable to threats and vulnerabilities of APIs across the cloud and services in your environment. Using this information, you can manage and implement security measures to safeguard the APIs running in your environment. The predefined dashboard for API security management, you can view data for:
NoticeRequires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. |
Application Security | Provides an overview of application security posture with asset and code/pipeline issue insights. NoticeRequires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. |
Automation Insights | Provides a high-level overview of automation, focusing on issues automatically closed and execution trends. |
Case Management | Provides a breakdown of the top cases and hosts in your environment, and an overview of the top case assignees. NoteSelect the star in the right corner of a widget to filter the data for cases that match case-starring policies. A purple star indicates that the widget is displaying only starred cases. The starring filter is persistent and continues to show the filtered results until you clear the star. |
Cortex Cloud Command Center | A central hub that provides a prioritized high-level summary of cloud accounts, provider scanning health, and asset distribution across all cloud providers, tracking progress over time with 90-day trends for Threat and Posture cases. For more information, see Cortex Cloud Command Center.Cortex Cloud Command Center |
Cloud Security Operations | Provides an overview of your cloud security operations dashboard helps you rapidly assess your security posture and resolve issues with the largest impact. For more information, see Cloud Security Operations. |
Data Ingestion | Provides an overview of data ingestion by product and vendor, the daily quota consumption, and your data ingestion rate. Due to a calculation change in NGFW log ingestion and improvements to data ingestion metrics, you cannot view data earlier than July 2023 on this dashboard. However, you can still view this data by running Cortex Query Language (XQL) queries on the |
Data Security | Discover and visualize all your data assets across the different cloud services, which will help you understand where the sensitive data is, how it is used and how it is moving across the organization. For more information, see What is Cortex Cloud Data Security?.What is Cortex Cloud Data Security? NoticeRequires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. |
Identity Security | You can use the Identity Security dashboard to ensure that your identity estate is fully covered from a security perspective. The Identity Security dashboard helps you perform actions such as monitoring your identity inventory, detecting the top critical issues and findings in your environment, identifying risky identities, discovering admins and admins at risk, and analyzing 3rd-party access. For more information, see What is Cortex Cloud Identity Security?.What is Cortex Cloud Identity Security? NoticeRequires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. |
My Dashboard | Provides an overview of the cases and MTTR for the logged-in user. |
Security Admin | Provides an overview of the cases in your organization and the status of resolved and overdue cases. |
Security Manager | Provides general information about Cortex XDR cases and agents. |
Troubleshooting Instances | Provides a detailed view of command and execution errors at the instance level, helping diagnose and resolve issues with specific integrations. |
Troubleshooting Playbooks | Provides the ability to identify and resolve issues with playbooks and tasks through focused error analysis and runtime metrics. |