Manage Your Widget Library - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Pro Administrator Guide

Cortex XDR
Creation date
Last date published
Administrator Guide

Create, search, and view custom widgets in Cortex XDR, or use predefined widgets.

The widget library displays predefined widgets and user-created custom widgets. You can include these widgets in your custom dashboards and reports. To access the widget library, navigate to Dashboards & ReportsCustomizeWidget Library.

Create and Edit Custom Widgets Based on XQL Search Queries

Learn how to create and edit custom widgets based on XQL Search queries.

  1. In the widget menu, Create custom XQL widget.

  2. Enter a widget Name and optional Description.

  3. Create an XQL query. Select XQL Helper to view XQL search and schema examples.

  4. Generate the XQL query to display the search results.


    Cortex Query Language (XQL) queries generated from the widget library do not appear in the Query Center. The results are used only for creating the custom widget.

  5. In the Widget section, define how you want to visualize the results.

  6. After you are happy with the query parameters and visualization definitions, Save widget.

    The custom widget appears in the list of existing widgets.

Search for Custom and Predefined Widgets

Learn how to search for custom and predefined widgets.

  1. Search for a widget or Show widgets according to the type of category.

  2. Select a widget type to display the widget graph type and parameters. By default, Cortex XDR displays the widget with Mock Data. Toggle to display your current Real Data.

Edit Existing Custom Widgets

Learn how to edit existing custom widgets.

  1. Locate a custom widget.

  2. Select Update widget (pencil-icon.png) to edit the widget or Delete widget from library.


    Editing an existing widget affects all dashboards that include the widget and future generated reports.