> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center.md).

# XSIAM Command Center

The **XSIAM Command Center** dashboard provides a dynamic overview of your security operations processes, and supports drilldowns to additional dashboards and dedicated pages. The dashboard gives a visualization of the current status of your tenant and its activity during the selected time frame. Click on any element to drill down to dashboards or pages displaying data that is filtered by your selection.

In addition, click on **Cortex Agentic Assistant** to open a dashboard detailing how Cortex XSIAM uses AI Agentic technology in your environment. For more information, see [Cortex Agentic Assistant](/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard.md).

![XSIAM\_Command\_Center-Platform.png](/files/wIJ3qWXTZBP31aKOHHxs)

The **XSIAM Command Center** includes incoming data, cases, and issues, and key performance indicators. The following table describes each of these sections:

<table><thead><tr><th width="172">Section</th><th>Details</th></tr></thead><tbody><tr><td>Incoming data</td><td><ul><li>Number of connected Cortex XDR agent endpoints providing EDR data.</li><li>Data source instances grouped by integration and ordered by ingestion volume. Integrations shown in red indicate there is currently an error.</li></ul><p>Click on any of these items to explore your <strong>Data Inventory</strong>. Breakdowns of data ingestion by data source, including ingestion rates, trends, and prevented events, are displayed.</p></td></tr><tr><td>Cases and issues</td><td><ul><li>The number of issues opened during the time frame.</li><li><p>The number of cases that were created in response to the issues.</p><p>Cases are split into manual cases and automated cases, where automated cases contain at least one playbook. You can also see the number of resolved cases and open cases broken down by severity.</p></li></ul><p>Click on any of the case metrics to open the <strong>Cases Overview</strong> , showing a breakdown of your cases. You can also click on the concentric circle to see a live feed of Cortex XSIAM activity on the <strong>Dynamic View</strong>.</p></td></tr><tr><td>Key performance indicators</td><td><ul><li>The amount of data and events ingested during the time frame and the ingestion rate.</li><li>The number of currently open cases broken down by severity. This number represents all open cases on the system, and is not time frame specific.</li><li>The number of attacks prevented by Cortex XSIAM during the time frame.</li></ul><p>Click on the key performance indicators to drill down to dedicated pages for further investigation. You can also click <strong>Start Investigation</strong> to open the <strong>Cortex Agentic Assistant</strong> with useful prompts to aid you in the investigation process.</p><p>The trend percentages for the key performance indicators are calculated by comparing the totals from the current time frame with the totals of the previous time frame. An arrow indicates whether the rates are rising or falling in comparison to the previous time frame's total.</p></td></tr></tbody></table>

From the **XSIAM Command Center**, you can drill down to the following dashboards:

* [Cortex Agentic Assistant dashboard](/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-agentic-assistant-dashboard.md)
* [Data Inventory](/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/data-inventory.md)
* [Dynamic View](/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/dynamic-view.md)
* [Cases Overview](/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center/cases-overview.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/xsiam-command-center.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.