System dashboards

Reference dashboards provided with Cortex XDR.

System dashboards help you monitor and evaluate various aspects of your environment. You can access your default view by navigating to Dashboards & Reports → Dashboard. To change the displayed dashboard, click the dashboard name and select from the dashboard menu.

Because system dashboards are managed by the platform and cannot be edited or deleted, you can duplicate any dashboard in the Dashboard Manager. This creates a customizable version you can modify freely while keeping the original template intact.

Dashboard	Improved Description
Agent Management	Track the status, content versions, and OS distribution of all deployed agents across your organization.
AI Security	Assess your organization’s AI ecosystem and security posture to guide governance decisions and prioritize risk-mitigation steps. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. For more details, see What is Cortex Cloud AI Security?.
API Security Management	Identify and mitigate threats and vulnerabilities across cloud services by monitoring risky API funnels, regional attack patterns, attack traffic trends, and sensitive data exposure. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.
Application Security	Evaluate your application security posture through targeted insights into exposed assets, code vulnerabilities, and CI/CD pipeline issues. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.
Automation Insights	Review high-level automation performance, tracking automatically closed issues and execution trends over time.
Case Management	Analyze top cases, host activity, and assignee workloads across your environment. Tip: Select the star in the right corner of a widget to filter the data for cases that match case-starring policies. A purple star indicates that the widget is displaying only starred cases.
Cloud Security Operations	Assess and resolve high-impact cloud security issues quickly to maintain a strong security operational posture. For more details, see Cloud Security Operations. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.
Data Ingestion	Monitor data ingestion rates, vendor/product breakdowns, and daily quota consumption across your system. Note: Data prior to July 2023 is inaccessible on this dashboard due to metric updates, but remains queryable via XQL on the metrics_center dataset.
Data Security	Discover and visualize all your data assets across the different cloud services, which will help you understand where the sensitive data is, how it is used and how it is moving across the organization. For more information, see Data Ingestion. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.
Identity Security	Secure your identity estate by monitoring your identity inventory, detecting critical findings, identifying the top critical issues and findings in your environment, detecting risky identities, discovering admins and admins at risk, and analyzing 3rd-party access. Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.
My Dashboard	Manage personal case assignments and monitor individual Mean Time to Respond (MTTR) performance.
Security Admin	Supervise organizational case volume and track SLA resolution metrics for active and overdue cases.
Security Manager	Supervise operational case management and agent health across your environment. Monitor 30-day open cases by severity, top 10 open cases, and workload distribution by assignee (aged vs. total open cases), alongside top 5 agent version distributions and overall agent status breakdowns.
Troubleshooting Instances	Diagnose integration failures by analyzing command and execution errors at the individual instance level.
Troubleshooting Playbooks	Debug playbook and task execution errors using focused runtime metrics and failure analysis.