Reports Overview

Overview of Cortex XSOAR reports and how to create and edit reports. Analyze data in PDF, Word, and CSV formats.
Reports contain statistical data information which enables you to analyze data in PDF, Word and CSV formats. A report contains widgets, which enables you to analyze data from inside or outside Cortex XSOAR, in different formats such as graphs, pie charts, or text from information.
Reports can be time bound or non-time related. Time bound reports are incident summaries over a period of time. For example, incident summaries over the last 24 hours, or last 30 days. Non-time related reports are filtered summaries of incident data. For example, open, late, and critical incidents.
Cortex XSOAR comes with out-of-the-box reports, such as critical and High incidents, Daily incidents, last 7 days incidents, and so on. You can change the time range for the incidents, the schedules time and who can receive the report.
If you want to make more comprehensive changes to these type of reports, go to github reports repository, download and update the JSON file, and upload the report.
You can do the following:
For custom reports you can generate in PDF, Word, or CSV format.
You can run the report immediately or schedule a time as described in Schedule a report.
You can schedule a report directly from an incident, as described in Create an Incident Summary Report.

Recommended For You