> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/build-a-custom-dashboard.md).

# Build a custom dashboard

You can build custom dashboards based on predefined dashboard templates, or you can build a new dashboard from scratch.

1. Select Dashboards & Reports → Customize → Dashboards Manager → **+ New Dashboard**, or in the **Dashboard Manager** right-click an existing dashboard and select **Save as new**.
2. In the **Dashboard Builder**, under **Dashboard Name** enter a unique name for the dashboard.
3. Under **Dashboard Type**, choose a built-in dashboard template or a blank template, and click **Next**.
4. Customize your dashboard.

   To get a feel for how the data will look, Cortex XDR provides mock data. To see how the dashboard would look with real data in your environment, change the toggle to **Real Data**.
5. Add widgets to the dashboard. From the widget library, drag widgets on to the dashboard.

<details>

<summary>Notes for agent-related widgets and incident-related widgets</summary>

{% hint style="info" %}

#### Note

* For agent-related widgets, you can limit the results to only the endpoints that belong to the group by applying an endpoint scope.

  Select the menu on the top right corner of the widget, select **Groups**, and select one or more endpoint groups.
* For incident-related widgets, you can limit your incidents to only those that match an incident starring configuration on your dashboard. A purple star indicates that the widget is displaying only starred incidents. For more information, see Incident starring.
  {% endhint %}

</details>

6. (Optional) Configure fixed filters and inputs.

<details>

<summary>What are fixed filters and inputs?</summary>

Add fixed filters to your dashboard to provide dashboard users with useful dashboard filters that are based on predefined or dynamic input values. Any defined filters are displayed in the dashboard header.

Fixed filters are based on XQL widgets with dynamic parameters. If a dashboard contains these widgets, the **Add Filters & Inputs** option is displayed. For more information, see Configure fixed dashboard filters.

</details>

{% hint style="info" %}

#### Notice

This feature requires a Cortex XDR Pro or Cortex XSIAM license.
{% endhint %}

7\. (Optional) Configure dashboard drilldowns.

<details>

<summary>What are dashboard drilldowns?</summary>

Add drilldowns to your dashboard to provide interactive data insights when clicking on data points, table rows, or other visualization elements.

Dashboard drilldowns are based on XQL widgets. To add a drilldown to an XQL widget, click on the widget menu, and select **Add drilldown**. For more information, see [Configure dashboard drilldowns](https://app.gitbook.com/s/FOhYBYLdbwpnbJgr6uaX/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-dashboard-drilldowns).

</details>

{% hint style="info" %}

#### Notice

This feature requires a Cortex XDR Pro or Cortex XSIAM license.
{% endhint %}

8\. Under **Time Range**, set a time range for your dashboard.

By default, the widgets use the dashboard time frame. You can change the widget time frame from the widget menu.

9\. When you have finished customizing your dashboard, click **Next**.

10. To set the custom dashboard as your default dashboard, select **Define as default dashboard**.
11. To keep this dashboard visible only for you, select **Private**.

    Otherwise, the dashboard is public and visible to all Cortex XDR users with the appropriate roles to view dashboards. Private dashboards can only be viewed, edited, and deleted by the dashboard creator.
12. Click **Generate** to complete your dashboard.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/build-a-custom-dashboard.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.