Predefined Dashboards

Cortex XDR comes with predefined dashboards that display widgets tailored to the dashboard type. You can select any of the predefined dashboards directly from the dashboard menu in
Reporting
Dashboard
. You can also select and rename a predefined dashboard in the
Dashboard Builder
available by clicking
+ New Dashboard
. The types of dashboards that are available to you depend on your license type but can include:

Agent Management Dashboard

agent-management-dashboard.png
The Agent Management Dashboard displays at-a-glance information about the endpoints and agents in your deployment.
Support for the Agent Management Dashboard requires either a Cortex XDR Prevent or Cortex XDR Pro per Endpoint license.
The dashboard is comprised of the following Dashboard Widgets:
  • Agent Status Breakdown
  • Agent Content Version Breakdown (Top 5)
  • Agent Version Breakdown (Top 5)
  • Operating Type Distribution
  • Top Hosts (Top 10)

Incident Management Dashboard

incident-management-dashboard.png
The Incidents Management Dashboard provides a graphical summary of incidents in your environment, with incidents prioritized and listed by severity, assignee, incident age, and affected hosts.
The dashboard is comprised of the following Dashboard Widgets:
  • Incidents by Assignee (Top 5 Assignees)
  • Open Incidents
  • Open Incidents By Severity
  • Top Hosts (Top 10)
  • Top Incidents (Top 10)
To filter a widget to display only incidents that match incident starring policies, select the star in the right corner. A purple star indicates that the widget is displaying only starred incidents. The starring filter is persistent and will continue to show the filtered results until you clear the star.

Security Manager Dashboard

security-manager-dashboard.png
The Security Manager Dashboard widgets display general information about Cortex XDR incidents and agents. If you migrated from either Traps management service or the Endpoint Security Manager, you will notice similarities between the dashboards.
Support for Security Manager Dashboard requires either a Cortex XDR Prevent or Cortex XDR Pro per Endpoint license.
The dashboard is comprised of the following Dashboard Widgets:
  • Agent Status Breakdown
  • Agent Version Breakdown (Top 5)
  • Incidents by Assignees
  • Open Incidents
  • Open Incidents by Severity
  • Top Incidents (Top 10)
For incident-related widgets you can also filter the results to display only incidents that match incident starring policies. To apply the filter, select the star in the right corner of the widget. A purple star indicates that the widget is displaying only starred incidents. The starring filter is persistent and will continue to show the filtered results until you clear the star.

Recommended For You