Dashboard - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Prevent Administrator Guide

Cortex XDR
Creation date
Last date published
Administrator Guide

Dashboards enable you to effectively monitor activity in your environment. In the Dashboard Manager, you can create new dashboards and take actions on existing dashboards.

Dashboards offer graphical overviews of your tenant's activities, enabling you to effectively monitor incidents and overall activity in your environment. Each dashboard comprises widgets that summarize information about your endpoint in graphical or tabular format.


When you sign in to Cortex XDR your default dashboard is displayed. To change the displayed dashboard, in the dashboard header choose from the list of predefined and custom dashboards. You can also manage all of your dashboards from the Dashboard Manager.

On each dashboard, you can you can see the selected Time Range on the right side of the header. An indicator shows the time that the dashboard was last updated, and if the data is not up-to-date you can click Refresh to update all widget data.

The dashboard menu provides additional options for managing your dashboard, including the option to save the dashboard as a report template, set it as your default dashboard, and disable the background animation.

Cortex XDR provides the following types of dashboards:

  • Predefined dashboards

    Predefined dashboards are configured for different system set-ups and use cases, and to assist SOC analysts in their investigations. You can create reports and custom dashboards that are based on predefined dashboards. For more information, see Predefined Dashboards.

  • Custom dashboards

    Custom dashboards provide the flexibility to design dashboards that are built to your own specifications. You can base custom dashboards on the predefined dashboards or create a new dashboard from scratch, and save your custom dashboards as reports. For more information, see Build a Custom Dashboard.Build a Custom Dashboard