Dashboards - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-04-21
Category
Administrator Guide
Abstract

Dashboards help you to monitor system activity in your environment. Select a dashboard from the drop-down menu, or take actions on your dashboards from the Dashboard Manager.

Dashboards offer graphical overviews of your tenant's activities, enabling you to effectively monitor incidents and overall activity in your environment. Each dashboard comprises widgets that summarize information about your endpoint in graphical or tabular format.

Agent_management_DB.png

When you sign in to Cortex XDR your default dashboard is displayed. To change the displayed dashboard, in the dashboard header choose from the list of predefined and custom dashboards. You can also manage all of your dashboards from the Dashboard Manager.

On each dashboard, you can you can see the selected Time Range on the right side of the header. An indicator shows the time that the dashboard was last updated, and if the data is not up-to-date you can click Refresh to update all widget data. You can also select widget specific time frames from the menu on an XQL widget. If you select a different time frame for a widget, a clock icon is displayed.

Notice

Widget specific time frames are are only supported in Cortex XDR Pro and Cortex XSIAM.

The dashboard menu provides additional options for managing your dashboard, including the option to save the dashboard as a report template, set it as your default dashboard, and disable the background animation.

Cortex XDR provides the following types of dashboards:

  • Predefined dashboards

    Predefined dashboards are configured for different system set-ups and use cases, and to assist SOC analysts in their investigations. You can create reports and custom dashboards that are based on predefined dashboards. For more information, see Predefined Dashboards.

  • Custom dashboards

    Custom dashboards provide the flexibility to design dashboards that are built to your own specifications. You can base custom dashboards on the predefined dashboards or create a new dashboard from scratch, and save your custom dashboards as reports. For more information, see Custom dashboards.

Manage your dashboards

You can see all of your predefined and custom dashboards in the Dashboard Manager, and take the following actions:

  • Create, edit, and delete custom dashboards

  • Select your default dashboard

  • Create a report template based on a dashboard

Note

You cannot edit the predefined dashboards but you can create a new dashboard that is based on a dashboard template.