Create a new report - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-08-29
Last date published
2024-10-07
Category
User Guide
Solution
Cloud
Abstract

Create a new report template from scratch or by modifying an existing report template.

You can create a new report template from scratch or by modifying an existing report template. You can also schedule reports to run regularly.

  1. Go to ReportsReports Templates and select +New Template.

  2. Enter a unique Report Name and an optional Description of the report.

  3. Select the Data Timeframe for your report.

    You can choose Last 24H (day), Last 7D (week), Last 1M (month), or you can choose a custom timeframe.

    Note

    The custom timeframe is limited to one month.

  4. Choose the Report Type.

    Use an existing template or build the new report template from scratch.

  5. Click Next.

  6. Customize your report.

    Drag and drop widgets from the widgets library to the desired position in the report template.

    Click the options icon menu_options_button.png in the top right corner of a widget to customize the widget or remove the widget from the template.

    To get a feel for how the data will look, Cortex Xpanse provides mock data. To see how the report would look with real data in your environment, you can use the toggle above the report to use Real Data. Select Preview A4 to view how the report is displayed in an A4 format.

  7. Click Next.

  8. If you are ready to run the report, select Generate now.

  9. To run the report on a regular Schedule, you can specify the time and frequency that Cortex Xpanse will run the report.

  10. (Optional) Enter an Email Distribution list or Slack workspace to send a PDF version of your report.

    Select Add password used to access report sent by email and Slack to set password encryption.

    Note

    Password encryption is only available in PDF format.

  11. (Optional) Attach CSV file of your XQL query widget to a report.

    From the drop-down menu, search and select one or more of your custom widgets to attach to the report. The XQL query widget is attached to the report as a CSV file along with the customized PDF. Depending on how you selected to send the report, the CSV file is attached as follows:

    • Email—Sent as separate attachments for each widget. The total size of the attachment in the email cannot exceed 20MB.

    • Slack—Sent within a ZIP file that includes the PDF file.

  12. Save Template.

  13. After your report generates, you can download it from the ReportReports page.