Which dashboard provides visibility into endpoint status, alert trends, and incident distribution?

The Endpoints Dashboard aggregates endpoint health (online/offline, agent content versions), contextual alert statistics, and incident‐severity widgets. This provides a single view of endpoint status together with alert trends and incident distribution, allowing analysts to assess protection posture and prioritise investigations quickly.

A. Incidents dashboard focuses on incident queues and severities, not endpoint status.
B. Alerts dashboard charts alert volume/severity but lacks endpoint‐health widgets.
D. Forensics dashboard shows detailed timelines and artifact views, not high-level status metrics.

1. Palo Alto Networks, Cortex XDR Admin Guide 3.7, “Endpoints Dashboard,” p.101–102 (“…visibility into endpoint status, alert trends, and incident distribution”).

2. Palo Alto Networks, “Dashboards in Cortex XDR,” TechDocs, 2023-10-12, Table 1.