> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/predefined-dashboards.md). # Predefined dashboards Cortex XDR provides predefined dashboards that display widgets tailored to the dashboard type. The dashboards can help you to monitor different aspects of your environment. To access your default dashboard, select **Dashboards & Reports** → Dashboard. From the dashboard header, a drop-down menu lists all available predefined and custom dashboards. The available dashboards depend on your license type. To change your default dashboard, go to **Dashboards & Reports** → Dashboard Manager. In the **Dashboard Manager** you can also create custom dashboards based on existing dashboards, and save dashboards as report templates.
The following predefined dashboards are available: | Dashboard name | Description | Other details | | ------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Agent management | Provides an overview of the deployed agents in your organization, their statuses and content versions, and a breakdown by OS type. |

Notice

Requires a Cortex XDR Prevent or Cortex XDR Pro per Endpoint license.

| | Cloud inventory | Provides an overview of your cloud-based assets. |

Notice

Requires a Cortex XDR Pro per GB license.

| | Data ingestion | Provides an overview of data ingestion by product and vendor, the daily quota consumption, and your data ingestion rate. |

Notice

Requires a Cortex XDR Pro license.

Due to a calculation change in NGFW log ingestion and improvements to data ingestion metrics, you cannot view data earlier than July 2023 on this dashboard. However, you can still view this data by running Cortex Query Language (XQL) queries on the metrics\_center data set.

| | Incident management | Provides a breakdown of the top incidents and hosts in your environment, and an overview of the top incident assignees. |

Select the star in the the right corner of a widget to filter the data for incidents that match incident starring policies.

A purple star indicates that the widget is displaying only starred incidents. The starring filter is persistent and continues to show the filtered results until you clear the star.

| | My dashboard | Provides an overview of the incidents and MTTR for the logged-in user. | | | Network traffic analysis (NTA) | Provides an overview of network traffic analysis, and highlights key pieces of information. |

Notice

Requires a Cortex XDR Pro license.

| | NGFW ingestion | Provides an overview of ingestion status for all log types, the daily quota consumption for NGFW, and a breakdown by log type. |

Notice

Requires a Cortex XDR Pro per GB license.

| | Risk management |

Provides alert and incident information to aid in risk assessment by highlighting information about compromised accounts and insider threats.

The alerts displayed in this dashboard are tagged by the research as Identity Threat alerts or Identity Analytics alerts. An incident is displayed if any of its associated alerts are tagged as an Identity threat or an Identity Analytics threat.

|

Notice

Requires a Cortex XDR Pro license and the Identity Threat Module add-on to be enabled.

| | Security admin | Provides an overview of the incidents in your organization, and the status of resolved and overdue incidents. | | | Security manager | Provides general information about Cortex XDR incidents and agents. |

Notice

Requires a Cortex XDR Pro per Endpoint license.

|
--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-3.x/cortex-xdr-3.x-documentation/investigate-and-respond-to-incidents/dashboards/predefined-dashboards.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.