Manage Your Widget Library - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Product
Cortex XDR
License
Pro
Creation date
2023-10-31
Last date published
2024-03-18
Category
Administrator Guide
Abstract

Create, search, and view custom widgets in Cortex XDR, or use predefined widgets.

The widget library displays predefined widgets and user-created custom widgets. You can include these widgets in your custom dashboards and reports. To access the widget library, navigate to Dashboards & ReportsCustomizeWidget Library.

Create and Edit Custom Widgets Based on XQL Search Queries
Abstract

Learn how to create and edit custom widgets based on XQL Search queries.

  1. In the widget menu, Create custom XQL widget.

  2. Enter a widget Name and optional Description.

  3. Create an XQL query. Select XQL Helper to view XQL search and schema examples.

  4. Generate the XQL query to display the search results.

    Note

    Cortex Query Language (XQL) queries generated from the widget library do not appear in the Query Center. The results are used only for creating the custom widget.

  5. In the Widget section, define how you want to visualize the results.

  6. After you are happy with the query parameters and visualization definitions, Save widget.

    The custom widget appears in the list of existing widgets.

Search for Custom and Predefined Widgets
Abstract

Learn how to search for custom and predefined widgets.

  1. Search for a widget or Show widgets according to the type of category.

  2. Select a widget type to display the widget graph type and parameters. By default, Cortex XDR displays the widget with Mock Data. Toggle to display your current Real Data.

Edit Existing Custom Widgets
Abstract

Learn how to edit existing custom widgets.

  1. Locate a custom widget.

  2. Select Update widget (pencil-icon.png) to edit the widget or Delete widget from library.

    Note

    Editing an existing widget affects all dashboards that include the widget and future generated reports.