Overview of Cortex XSOAR reports and how to create and edit reports. Analyze data in PDF, Word, and CSV formats. Upload your own logo.
Reports contain statistical data in the form of widgets, which enable you to analyze data from inside or outside Cortex XSOAR, in different formats such as graphs, pie charts, or text.
After generating a report, it also appears in the Reports tab, so you can use the report again.
You can do the following:
When creating a report, what you see is what you get. How you configure the report, is how it generates. You can add widgets to a report, change the format, paper size, insert page breaks (by adding the Page Break widget), etc. If you have a table widget that contains many rows, you can select the number of rows on each page or print the whole table (in the table widget, right click and select Force Print full Chart).
You can add your own logo, by going to → and uploading your logo in the Full-size logo field. Reports are generated in PDF, Word and CSV formats.
Note
If upgrading from a previous version to v6.5 and above, the last configured roles are used when running a report. For example, if User A (administrator) runs a report (run as current user) and then User B (analyst) runs the same report (run as current user) only the analyst role appears in Run as roles field in version 6.6.
Create a report from a dashboard
You can create a report from the dashboard as is, or add new widgets as required. You have the same functionality as custom reports, such as format, when to run, orientation, etc. To create a report from the dashboard, click Create report.
You can schedule a report to run at specific times, or run the report immediately. You can also send to specific recipients, and restrict the report according to roles.
Generate an out-of-the-box report
Cortex XSOAR comes with out-of-the-box reports, such as Critical and High incidents, Daily incidents, Last 7 days incidents, and so on. You can change the time range for the incidents, the scheduled time and who can receive the report. If you want to make more comprehensive changes to these types of out-of-the-box reports, copy or download (and upload) the report.
Schedule a report from an incident
Captures investigation-specific data and share it with team members. You can customize how the information is displayed for existing incidents.
If reports do not download after you click Run, add your Cortex XSOAR URL to your browser's pop up blocker exceptions. If you encounter problems with reports, see Troubleshoot Reports.