Run or Schedule Reports

There are two ways to create a report template:

Run a Report Based on a Dashboard

  1. Select
    Reporting
    Dashboards Manager
    .
  2. Right-click the dashboard from which you want to generate a report, and select
    Save as report template
    .
  3. Enter a unique
    Report Name
    and an optional
    Description
    of the report, then
    Save
    the template.
  4. Select
    Reporting
    Report Templates
    .
  5. Run the report.
    You can either
    Generate Report
    to run the report on-demand, or you can
    Edit
    the report template to define a schedule.
  6. After your report completes, you can download it from the
    Reporting
    Reports
    page.

Create a Report from Scratch

  1. Select
    Reporting
    Report Templates
    + New Template
    .
  2. Enter a unique
    Report Name
    and an optional
    Description
    of the report.
  3. Select the
    Data Timeframe
    for your report.
    You can choose
    Last 24H
    (day),
    Last 7D
    (week),
    Last 1M
    (month), or you can choose a custom timeframe.
    Custom timeframe is limited to one month.
  4. Choose the
    Report Type
    .
    You can use an existing template, or you can build a new report from scratch.
  5. Click
    Next
    .
  6. Customize your report.
    To get a feel for how the data will look, Cortex XDR provides mock data. To see how the report would look with real data in your environment, you can use the toggle above the report to use
    Real Data
    .
    Drag and drop widgets from the widget library to their desired position.
    If necessary, remove unwanted widgets from the template. To remove a widget, select the menu in the top right corner, and select
    Remove widget
    .
    For incident-related widgets, you can also select the star to include only incidents that match an incident starring configuration in your report. A purple star indicates that the widget is displaying only starred incidents.
  7. When you have finished customizing your report template, click
    Next
    .
  8. If you are ready to run the report, select
    Generate now
    .
  9. To run the report on a regular
    Schedule
    , you can specify the time and frequency that Cortex XDR will run the report.
  10. Enter an optional
    Email Distribution
    or
    Slack workspace
    to send a PDF version of your report.
    Select
    Add password for e-mailed report
    to set a password encryption.

Recommended For You