> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-dashboard-drilldowns.md).
# Configure dashboard drilldowns
{% hint style="info" %}
### Notice
Dashboard drilldowns are supported in Cortex XDR Pro and Cortex XSIAM only.
{% endhint %}
Dashboard drilldowns can trigger contextual changes on the dashboard, or they can link to an XQL search, a custom URL, another dashboard, or a report. You configure drilldowns on individual widgets. After a drilldown is configured, clicking the widget triggers the drilldown.
{% hint style="warning" %}
### Prerequisite
To configure drilldowns your dashboard must contain custom XQL widgets. In addition, if you want to configure in-dashboard drilldowns your custom XQL widget must contain one or more parameters. For more information about configuring parameters in custom XQL widgets, see [Create custom XQL widgets](/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/create-custom-xql-widgets.md).
{% endhint %}
How to configure dashboard drilldowns
1. Open a custom dashboard and select **Edit dashboard**.
2. Identify the widget to which you want to apply a drilldown, click on the widget menu, and select **Add drilldown**.
3. In **Action On Click** select one of the following options:
* **In-Dashboard Drilldown**: Interactively filters the dashboard data. Filters are based on the parameters defined in the custom XQL widgets on the dashboard.
Define the following values:
| Field | Action |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Parameters** | Select the parameter by which to filter. You can choose any parameter that is defined in the XQL query of the widget.
Note
If the selected parameter is configured in other XQL widgets on the dashboard, these widgets are also affected by the drilldown.
When a user clicks the widget, the dashboard is filtered by this value.
- Type your own value.
- Select a variable from which to capture the clicked value, for example, the $y-axis.value in a chart. For more information, see Variables in drilldowns.
|
* **Link to dashboard**: Opens a target dashboard.
Define the following values:
| Field | Action |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Dashboard** | Select the target dashboard. |
| (Optional) **Parameter** | Select parameters by which to filter the data on the target dashboard. Parameters are only available if there are parameters defined in the widgets on the *target* dashboard. |
| (Optional) **Value** | When a user clicks the widget, this value is configured as a parameter on the target dashboard.
- Type your own value.
- Select a variable from which to capture the clicked value in the source dashboard, for example, the $y-axis.value in a chart. For more information, see Variables in drilldowns.
|
* **Open XQL Search**: Runs an XQL query based on the clicked value.
Define the following values:
| Field | Action |
| ------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **XQL Query** | Define the query that you want to run on drilldown.
Type $ to see autocomplete options for variables that are available in the widget drilldown. For example, in a table widget $first.name selects the leftmost column name in the table. For more information, see Variables in drilldowns.
|
In the following example two parameters are passed from a table widget to an XQL query. The first parameter with the cell value that the user clicked on, and a second parameter with the cell value in the request\_url column in the row that the user clicked.
```programlisting
dataset=xdr_data
|filter event_type=$y_axis.value and requestUri=$row.request_url
|fields action_download, action_remote_ip as remote_ip,
actor_process_image_name as process_name
|comp count_distinct(action_download) as total_download by process_name,
remote_ip, remote_hostname
|sort desc total_download
|limit 10
|view graph type=single subtype=standard xaxis=remote_ip yaxis=total_download
```
* **Open custom URL**: Opens an external URL based on a clicked value.
Define the following values:
| Field | Action |
| --------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **URL Address** | Type the URL.
To create a dynamic drilldown, you can include Available parameters. For more information about the parameters, see Variables in drilldowns.
|
In the following URL, the **`$x_axis.value`** parameter represents cortex products names. On drilldown, the $x\_axis.value is replaced with the clicked product name in the pie chart.
* **Generate Report**: Runs a report from a clicked value.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/custom-dashboards/configure-dashboard-drilldowns.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.