Dashboards
APIs for managing dashboards
Import a dashboard to Cortex XSOAR
The JSON file of the dashboard to import.
The saved dashboard
Who has created this event - relevant only for manual incidents
Internal field to make queries on role faster
Do not change this field manually
The role assigned to this investigation
POST /dashboards/import HTTP/1.1
Host: hostname
Authorization: YOUR_API_KEY
Content-Type: multipart/form-data
Accept: */*
Content-Length: 15
{
"file": "text"
}The saved dashboard
{
"accounts": {
"ANY_ADDITIONAL_PROPERTY": {}
},
"allRead": true,
"allReadWrite": true,
"cacheVersn": 1,
"commitMessage": "text",
"created": "2026-01-01T00:00:00.000Z",
"dbotCreatedBy": "text",
"definitionId": "text",
"fromDate": "2026-01-01T00:00:00.000Z",
"fromDateLicense": "2026-01-01T00:00:00.000Z",
"fromServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"hasRole": true,
"hidePivot": true,
"hideSearch": true,
"highlight": {
"ANY_ADDITIONAL_PROPERTY": [
"text"
]
},
"id": "text",
"indexName": "text",
"isCommon": true,
"itemVersion": {
"Digits": [
1
],
"Label": "text"
},
"layout": [
{
"forceRange": true,
"h": 1,
"i": "text",
"id": "text",
"reflectDimensions": true,
"w": 1,
"widget": {
"Cache": {
"ANY_ADDITIONAL_PROPERTY": [
"text"
]
},
"accounts": {
"ANY_ADDITIONAL_PROPERTY": {}
},
"cacheVersn": 1,
"category": "text",
"commitMessage": "text",
"created": "2026-01-01T00:00:00.000Z",
"dataType": "text",
"dateRange": {
"fromDate": "2026-01-01T00:00:00.000Z",
"fromDateLicense": "2026-01-01T00:00:00.000Z",
"period": {
"by": "text",
"byFrom": "text",
"byTo": "text",
"field": "text",
"fromValue": "text",
"toValue": "text"
},
"toDate": "2026-01-01T00:00:00.000Z"
},
"definition": {
"auditable": true,
"cacheVersn": 1,
"commitMessage": "text",
"created": "2026-01-01T00:00:00.000Z",
"definitionId": "text",
"fromServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"highlight": {
"ANY_ADDITIONAL_PROPERTY": [
"text"
]
},
"id": "text",
"indexName": "text",
"itemVersion": {
"Digits": [
1
],
"Label": "text"
},
"locked": true,
"modified": "2026-01-01T00:00:00.000Z",
"name": "text",
"numericId": 1,
"packID": "text",
"packName": "text",
"packPropagationLabels": [
"text"
],
"partitioned": true,
"pluralName": "text",
"prevName": "text",
"primaryTerm": 1,
"propagationLabels": [
"text"
],
"rbacSupport": true,
"remote": true,
"sequenceNumber": 1,
"shouldCommit": true,
"sizeInBytes": 1,
"sortValues": [
"text"
],
"syncHash": "text",
"system": true,
"toServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"vcShouldIgnore": true,
"vcShouldKeepItemLegacyProdMachine": true,
"version": 1
},
"definitionId": "text",
"description": "text",
"fromServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"highlight": {
"ANY_ADDITIONAL_PROPERTY": [
"text"
]
},
"id": "text",
"ignoreWorkers": true,
"indexName": "text",
"isPredefined": true,
"itemVersion": {
"Digits": [
1
],
"Label": "text"
},
"locked": true,
"modified": "2026-01-01T00:00:00.000Z",
"name": "text",
"numericId": 1,
"packID": "text",
"packName": "text",
"packPropagationLabels": [
"text"
],
"page": 1,
"params": {
"ANY_ADDITIONAL_PROPERTY": {}
},
"prevName": "text",
"primaryTerm": 1,
"propagationLabels": [
"text"
],
"query": "text",
"remote": true,
"searchAfter": [
"text"
],
"searchAfterElastic": [
"text"
],
"searchAfterMap": {
"ANY_ADDITIONAL_PROPERTY": [
"text"
]
},
"searchAfterMapOrder": {
"ANY_ADDITIONAL_PROPERTY": 1
},
"searchBefore": [
"text"
],
"searchBeforeElastic": [
"text"
],
"sequenceNumber": 1,
"shouldCommit": true,
"size": 1,
"sizeInBytes": 1,
"skipAggregateAccounts": true,
"sort": [
{
"asc": true,
"field": "text",
"fieldType": "text"
}
],
"sortValues": [
"text"
],
"syncHash": "text",
"toServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"vcShouldIgnore": true,
"vcShouldKeepItemLegacyProdMachine": true,
"version": 1,
"widgetType": "text"
},
"x": 1,
"y": 1
}
],
"locked": true,
"modified": "2026-01-01T00:00:00.000Z",
"modulePage": true,
"name": "text",
"numericId": 1,
"owner": "text",
"packID": "text",
"packName": "text",
"packPropagationLabels": [
"text"
],
"period": {
"by": "text",
"byFrom": "text",
"byTo": "text",
"field": "text",
"fromValue": "text",
"toValue": "text"
},
"prevName": "text",
"previousAllRead": true,
"previousAllReadWrite": true,
"previousRoles": [
"text"
],
"primaryTerm": 1,
"propagationLabels": [
"text"
],
"remote": true,
"roles": [
"text"
],
"sequenceNumber": 1,
"shouldCommit": true,
"sizeInBytes": 1,
"sortValues": [
"text"
],
"syncHash": "text",
"system": true,
"toDate": "2026-01-01T00:00:00.000Z",
"toServerVersion": {
"Digits": [
1
],
"Label": "text"
},
"vcShouldIgnore": true,
"vcShouldKeepItemLegacyProdMachine": true,
"version": 1,
"xsoarHasReadOnlyRole": true,
"xsoarPreviousReadOnlyRoles": [
"text"
],
"xsoarReadOnlyRoles": [
"text"
]
}Get a given dashboard statistics result. Deprecated - use "/v2/statistics/dashboards/query
Return an array of stats results for each widget cell in dashboard.
data array or object describing the statistics data based on type.
POST /statistics/dashboards/query HTTP/1.1
Host: hostname
Authorization: YOUR_API_KEY
Accept: */*
Return an array of stats results for each widget cell in dashboard.
[
{
"accountErrors": [
"text"
],
"data": {},
"totalAccounts": 1,
"widgetCellId": "text"
}
]Get a given dashboard statistics result.
Return an array of stats results for each widget cell in dashboard.
data array or object describing the statistics data based on type.
POST /v2/statistics/dashboards/query HTTP/1.1
Host: hostname
Authorization: YOUR_API_KEY
Accept: */*
Return an array of stats results for each widget cell in dashboard.
[
{
"accountErrors": [
"text"
],
"data": {},
"totalAccounts": 1,
"widgetCellId": "text"
}
]Last updated
Was this helpful?
