> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards.md).

# System dashboards

Reference dashboards provided with Cortex XDR.

System dashboards help you monitor and evaluate various aspects of your environment. You can access your default view by navigating to **Dashboards & Reports → Dashboard**. To change the displayed dashboard, click the dashboard name and select from the dashboard menu.

Because system dashboards are managed by the platform and cannot be edited or deleted, you can duplicate any dashboard in the **Dashboard Manager**. This creates a customizable version you can modify freely while keeping the original template intact.

<table><thead><tr><th width="189">Dashboard</th><th>Improved Description</th></tr></thead><tbody><tr><td><strong>Agent Management</strong><br></td><td><strong>Track</strong> the status, content versions, and OS distribution of all deployed agents across your organization.</td></tr><tr><td><strong>AI Security</strong></td><td><p><strong>Assess</strong> your organization’s AI ecosystem and security posture to guide governance decisions and prioritize risk-mitigation steps.<br><br></p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on. For more details, see What is Cortex Cloud AI Security?.</p></div></td></tr><tr><td><strong>API Security Management</strong></td><td><p><strong>Identify</strong> and mitigate threats and vulnerabilities across cloud services by monitoring risky API funnels, regional attack patterns, attack traffic trends, and sensitive data exposure.<br><br></p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.</p></div></td></tr><tr><td><strong>Application Security</strong></td><td><p><strong>Evaluate</strong> your application security posture through targeted insights into exposed assets, code vulnerabilities, and CI/CD pipeline issues.<br><br></p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.</p></div></td></tr><tr><td><strong>Automation Insights</strong></td><td><strong>Review</strong> high-level automation performance, tracking automatically closed issues and execution trends over time.</td></tr><tr><td><strong>Case Management</strong></td><td><p><strong>Analyze</strong> top cases, host activity, and assignee workloads across your environment.<br><br></p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p><strong>Tip:</strong> Select the star in the right corner of a widget to filter the data for cases that match case-starring policies. A purple star indicates that the widget is displaying only starred cases.</p></div></td></tr><tr><td><strong>Cloud Security Operations</strong></td><td><p><strong>Assess</strong> and resolve high-impact cloud security issues quickly to maintain a strong security operational posture.</p><p>For more details, see <a href="/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/cloud-security-operations.md">Cloud Security Operations</a>.<br></p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.</p></div></td></tr><tr><td><strong>Data Ingestion</strong></td><td><p><strong>Monitor</strong> data ingestion rates, vendor/product breakdowns, and daily quota consumption across your system.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p><strong>Note:</strong> Data prior to July 2023 is inaccessible on this dashboard due to metric updates, but remains queryable via XQL on the metrics_center dataset.</p></div></td></tr><tr><td><strong>Data Security</strong></td><td><p><strong>Discover</strong> and visualize all your data assets across the different cloud services, which will help you understand where the sensitive data is, how it is used and how it is moving across the organization. For more information, see <a href="/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards/data-ingestion.md">Data Ingestion</a>.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.</p></div></td></tr><tr><td><strong>Identity Security</strong></td><td><p><strong>Secure</strong> your identity estate by monitoring your identity inventory, detecting critical findings, identifying the top critical issues and findings in your environment, detecting risky identities, discovering admins and admins at risk, and analyzing 3rd-party access.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>Requires the Cortex Cloud Posture Management add-on or the Cortex Cloud Runtime Security add-on.</p></div></td></tr><tr><td><strong>My Dashboard</strong><br></td><td><strong>Manage</strong> personal case assignments and monitor individual Mean Time to Respond (MTTR) performance.</td></tr><tr><td><strong>Security Admin</strong></td><td><strong>Supervise</strong> organizational case volume and track SLA resolution metrics for active and overdue cases.</td></tr><tr><td><strong>Security Manager</strong></td><td><strong>Supervise</strong> operational case management and agent health across your environment. Monitor 30-day open cases by severity, top 10 open cases, and workload distribution by assignee (aged vs. total open cases), alongside top 5 agent version distributions and overall agent status breakdowns.</td></tr><tr><td><strong>Troubleshooting Instances</strong></td><td><strong>Diagnose</strong> integration failures by analyzing command and execution errors at the individual instance level.</td></tr><tr><td><strong>Troubleshooting Playbooks</strong></td><td><strong>Debug</strong> playbook and task execution errors using focused runtime metrics and failure analysis.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xdr-5.x/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/system-dashboards.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.