Configure the Time Zone in a Report - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-09-26
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Change the timezone and time format in a report.

By default, Cortex XSOAR uses the UTC timezone in all reports. You can set a different timezone in the report.

Note

For most out-of-the-box reports, timezone and time formats in a widget cannot be changed unless you copy the report. Some out-of-the-box reports, such as Open Incidents, include a title widget which shows the date the report is generated according to the system default timezone.

Configure the Time Zone for a Specific Report

You may want to configure the timezone for a specific report to align event timestamps with the local time zone of the team reviewing the report. This provides context for event timelines and facilitates better analysis and decision making.

For example, if your SOC team is based in New York but you need to generate a report for another team in London, configure the time zone to GMT to match the incident timestamps to the local time in London to make it easier for the London team to understand and respond to the events accurately.

  1. For a new report, select Dashboards & Reports → Reports → New Report.

    To edit an existing report, in the Reports page, locate the report you want to edit and click the Edit button.

  2. From the Time Zone dropdown list, select the timezone a specific report will display.

  3. Click Save or Save Version.

    Save Version enables you to view a history of the changes made to your report. You can revert to previous versions of the report.

Configure the Time Zone for all Reports

We recommend keeping the default (UTC) timezone for all reports and configuring the timezone for specific reports only. However, you can change the timezone displayed in all reports by adding a server configuration.

  1. Go to Settings & Info → Settings → System → Server Settings → Server Configuration → Add Server Configuration.

  2. Add the following key and value:

    Key

    Value

    reports.time.zone

    The timezone for your report widgets. For example:

    • Asia/Jerusalem

    • UTC (Default)

    • America/New York

    • CET

    • EST

    • GMT

  3. Save the configuration.