Reports contain statistical data information which enables you to analyze data in PDF, Word and CSV formats. A report contains widgets, which enables you to analyze data from inside or outside Cortex XSOAR, in different formats such as graphs, pie charts, or text from information.

Reports can be time bound or non-time related. Time bound reports are incident summaries over a period of time. For example, incident summaries over the last 24 hours, or last 30 days. Non-time related reports are filtered summaries of incident data. For example, open, late, and critical incidents.

Cortex XSOAR comes with out-of-the-box reports, such as critical and High incidents, Daily incidents, last 7 days incidents, and so on. These reports cannot be edited apart from the schedule time and who can receive the report.

You can do the following:

You can run the report immediately or schedule a time as described in Schedule a report.

You can schedule a report directly from an incident, as described in Create an Incident Summary Report.