Dashboards enable you to effectively monitor activity in your environment. In the Dashboard Manager, you can create new dashboards and take actions on existing dashboards.
Dashboards offer graphical overviews of your tenant's activities, enabling you to effectively monitor incidents and overall activity in your environment. Each dashboard comprises widgets that summarize information about your endpoint in graphical or tabular format.
When you sign in to Cortex XDR your default dashboard is displayed. To change the displayed dashboard, in the dashboard header choose from the list of predefined and custom dashboards. You can also manage all of your dashboards from the Dashboard Manager.
On each dashboard, you can you can see the selected Time Range on the right side of the header. An indicator shows the time that the dashboard was last updated, and if the data is not up-to-date you can click Refresh to update all widget data. You can also select widget specific time frames from the menu on an XQL widget. If you select a different time frame for a widget, a clock icon is displayed.
The dashboard menu provides additional options for managing your dashboard, including the option to save the dashboard as a report template, set it as your default dashboard, and disable the background animation.
If you are viewing a dashboard with dynamic parameters and filters configured, the dashboard header displays the defined filters. If dashboard drilldowns are defined, you can click on data points, table rows, or other visualization elements to see interactive data insights. For more information, see Using Dashboard Filters, Inputs, and Drilldowns.
Cortex XDR provides the following types of dashboards:
Predefined dashboards
Predefined dashboards are configured for different system set-ups and use cases, and to assist SOC analysts in their investigations. You can create reports and custom dashboards that are based on predefined dashboards. For more information, see Predefined Dashboards.
Custom dashboards
Custom dashboards provide the flexibility to design dashboards that are built to your own specifications. You can base custom dashboards on the predefined dashboards or create a new dashboard from scratch, and save your custom dashboards as reports. For more information, see Build a Custom Dashboard.