Run or Schedule Reports

There are two ways to create a report template:

Run a Report Based on a Dashboard

  1. Select
    Dashboards Manager
  2. Right-click the dashboard from which you want to generate a report, and select
    Save as report template
  3. Enter a unique
    Report Name
    and an optional
    of the report, then
    the template.
  4. Select
    Report Templates
  5. Run the report.
    You can either
    Generate Report
    to run the report on-demand, or you can
    the report template to define a schedule.
  6. After your report completes, you can download it from the

Create a Report from Scratch

  1. Select
    Report Templates
    + New Template
  2. Enter a unique
    Report Name
    and an optional
    of the report.
  3. Select the
    Data Timeframe
    for your report.
    You can choose
    Last 24H
    Last 7D
    Last 1M
    (month), or you can choose a custom timeframe.
    Custom timeframe is limited to one month.
  4. Choose the
    Report Type
    You can use an existing template, or you can build a new report from scratch.
  5. Click
  6. Customize your report.
    To get a feel for how the data will look, Cortex XDR provides mock data. To see how the report would look with real data in your environment, you can use the toggle above the report to use
    Real Data
    Drag and drop widgets from the widget library to their desired position.
    If necessary, remove unwanted widgets from the template. To remove a widget, select the menu in the top right corner, and select
    Remove widget
    For incident-related widgets, you can also select the star to include only incidents that match an incident starring configuration in your report. A purple star indicates that the widget is displaying only starred incidents.
  7. When you have finished customizing your report template, click
  8. If you are ready to run the report, select
    Generate now
  9. To run the report on a regular
    , you can specify the time and frequency that Cortex XDR will run the report.
  10. Enter an optional
    Email Distribution
    Slack workspace
    to send a PDF version of your report.
    Add password for e-mailed report
    to set a password encryption.

Recommended For You