https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542099#M4346 <P>Please take a look at <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Monitor-Administrative-Activity" target="_blank">Management Audit Logs</A>: you have the ability to <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Log-Forwarding-Data-Types" target="_blank">forward such logs</A> or write a XQL query (dataset = management_auditing ) and have it <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Dashboard?section=UUID-d74c9786-b88c-5f10-2bc1-08f4414d16bf" target="_blank">generate a report</A>.</P> Mon, 15 May 2023 02:23:46 GMT bbarmanroy 2023-05-15T02:23:46Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542020#M4338 <P>Hello Team,</P> <P>Can you help us with the query to schedule a report for the user details in cortex XDR.</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="RamyashreeMada_0-1683908033540.png" style="width: 144px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/50147iB11DE50A343E17AE/image-dimensions/144x87/is-moderation-mode/true?v=v2" width="144" height="87" role="button" title="RamyashreeMada_0-1683908033540.png" alt="RamyashreeMada_0-1683908033540.png" /></span></P> <P>&nbsp;</P> <P>&nbsp;</P> Fri, 12 May 2023 16:14:38 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542020#M4338 RamyashreeMada 2023-05-12T16:14:38Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542099#M4346 <P>Please take a look at <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Monitor-Administrative-Activity" target="_blank">Management Audit Logs</A>: you have the ability to <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Log-Forwarding-Data-Types" target="_blank">forward such logs</A> or write a XQL query (dataset = management_auditing ) and have it <A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Dashboard?section=UUID-d74c9786-b88c-5f10-2bc1-08f4414d16bf" target="_blank">generate a report</A>.</P> Mon, 15 May 2023 02:23:46 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542099#M4346 bbarmanroy 2023-05-15T02:23:46Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542140#M4350 <P>can you share the XQL query for the same?</P> <P>&nbsp;</P> Mon, 15 May 2023 07:28:42 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/scheduled-report-for-cortex-xdr-user-details/m-p/542140#M4350 Shahwaz_Md 2023-05-15T07:28:42Z