You can customize the Cortex® XDR™ dashboard to display
information that is most relevant to you and best presented for
create purposeful dashboards, you must consider the information
that you and other analysts find important to your day to day operations.
This consideration guides you in building a custom dashboard. When
you create a dashboard, you can select widgets from the widget library
and choose their placement on the dashboard.
+ New Dashboard
Enter a unique
of the dashboard.
You can use an existing dashboard as a template, or you
can build a new dashboard from scratch.
Customize your dashboard.
To get a feel for how the data will look,
Cortex XDR provides mock data. To see how the dashboard would look
with real data in your environment, you can use the toggle above
the dashboard to use
Drag and drop widgets from the widget library to their
For agent-related widgets, apply an endpoint scope,
Applying an endpoint scope restricts the results to only
the endpoints that belong to the group. To apply the scope, select
the menu on the top right corner of the widget and then select
Search for and select one or more endpoint groups for which you
want to set the widget scope.
For incident-related widgets, select the star to display
only incidents that match an incident starring configuration on
your dashboard, if desired. A purple star indicates that the widget
is displaying only starred incidents (see Manage Incident Starring).
Repeat the process to continue adding additional widgets
to the dashboard. If necessary, you can also remove unwanted widgets
from the dashboard. To remove a widget, select the menu in the top
right corner, and
When you have finished customizing your dashboard, click
To set the custom dashboard as your default dashboard
when you log in to Cortex XDR,
Define as default dashboard
To keep this dashboard visible only for you, select
Otherwise, the dashboard is public and visible to all Cortex
XDR app users with the appropriate roles to manage dashboards.