How do dashboards differ from reports in Cortex XDR?

In Cortex XDR, dashboards are designed for real-time operational awareness, offering interactive widgets that visualize current security data and trends. They update dynamically to reflect the latest information. In contrast, reports are static documents that capture a snapshot of data at a specific point in time. They are typically generated on a schedule (e.g., daily, weekly) or on-demand for compliance, historical analysis, or executive summaries and can be exported in formats like PDF or CSV.

B: Dashboards are interactive and dynamic, allowing users to drill down into data, while reports are static snapshots. C: Reports are not always manual; a key feature is the ability to schedule them for automated generation and distribution. D: Both dashboards and reports can be configured to display a wide variety of data, including incidents, alerts, endpoint data, and more.

1. Palo Alto Networks. (2023). Cortex XDR Administrator's Guide. "Dashboards". This section describes dashboards as providing a "graphical summary of the most important information" for monitoring.

2. Palo Alto Networks. (2023). Cortex XDR Administrator's Guide. "Reports". This section explains that you can "generate reports on demand or according to a schedule" to "view a snapshot of your data".