<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Create link on the dashboard in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598763#M7221</link>
    <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/487095937"&gt;@AbdBgc&lt;/a&gt;&amp;nbsp; Then you can use drill down and select below option:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="aspatil_0-1727275513289.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62397iEBADB59D63764EF6/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="aspatil_0-1727275513289.png" alt="aspatil_0-1727275513289.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 25 Sep 2024 14:45:21 GMT</pubDate>
    <dc:creator>aspatil</dc:creator>
    <dc:date>2024-09-25T14:45:21Z</dc:date>
    <item>
      <title>Create link on the dashboard</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598512#M7211</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I have created a simple custom Dashboard using a custom Widget. I want to put a link to endpoint table filtered by the result (result is the agent name), like the links on the default "Agent Management" dashboard. Does anyone know how to?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Dashboard_01.JPG" style="width: 793px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62356iA1AD375D03914401/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="Dashboard_01.JPG" alt="Dashboard_01.JPG" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thanks for the replies in advance.&lt;/P&gt;</description>
      <pubDate>Mon, 23 Sep 2024 08:45:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598512#M7211</guid>
      <dc:creator>AbdBgc</dc:creator>
      <dc:date>2024-09-23T08:45:08Z</dc:date>
    </item>
    <item>
      <title>Re: Create link on the dashboard</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598516#M7212</link>
      <description>&lt;P&gt;Hello&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/487095937"&gt;@AbdBgc&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Thanks for reaching out on LiveCommunity!&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;You have to create a drill down for it. Below is the sample for filtering alerts by Severity and instructions:&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV&gt;1. Edit the dashboard, click next and Look for the widget, click on three dots and click on Edit Drilldown&lt;/DIV&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;2. Paste below query and save and refer to below screenshot&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;/DIV&gt;
&lt;DIV&gt;dataset = alerts&lt;BR /&gt;| fields alert_id, incident_id, alert_arrival_timestamp, severity&lt;BR /&gt;| filter incident_id != null&lt;BR /&gt;| alter sev = severity&lt;BR /&gt;| alter sev1 = arrayindex(regextract(sev, "SEV_\d+_(.*)"),0)&lt;BR /&gt;| filter sev1 = $x_axis.value&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV&gt;
&lt;DIV id="tinyMceEditor_10be4fb859be6baspatil_1" class="mceNonEditable lia-copypaste-placeholder"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;P&gt;&lt;SPAN&gt;If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.&lt;/SPAN&gt;&lt;/P&gt;
&lt;/DIV&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 23 Sep 2024 09:24:35 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598516#M7212</guid>
      <dc:creator>aspatil</dc:creator>
      <dc:date>2024-09-23T09:24:35Z</dc:date>
    </item>
    <item>
      <title>Re: Create link on the dashboard</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598546#M7215</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/308232"&gt;@aspatil&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;thanks for the tip. Drilldown works as designed, I liked especially the chance to use the variables.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;But I would be more happy if I could create a link directly to the endpoint table (like the one in the default Endpoint Management dashboard), rather then a query, so that I can reach to the filtered endpoint list with one click and perform tasks on them.&lt;/P&gt;</description>
      <pubDate>Mon, 23 Sep 2024 13:16:00 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598546#M7215</guid>
      <dc:creator>AbdBgc</dc:creator>
      <dc:date>2024-09-23T13:16:00Z</dc:date>
    </item>
    <item>
      <title>Re: Create link on the dashboard</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598763#M7221</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/487095937"&gt;@AbdBgc&lt;/a&gt;&amp;nbsp; Then you can use drill down and select below option:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="aspatil_0-1727275513289.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/62397iEBADB59D63764EF6/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="aspatil_0-1727275513289.png" alt="aspatil_0-1727275513289.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 25 Sep 2024 14:45:21 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598763#M7221</guid>
      <dc:creator>aspatil</dc:creator>
      <dc:date>2024-09-25T14:45:21Z</dc:date>
    </item>
    <item>
      <title>Re: Create link on the dashboard</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598830#M7225</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/308232"&gt;@aspatil&lt;/a&gt;&amp;nbsp;Already tried that. I can get only to the default endpoint table, without the filter that I need. Is it possible to set a filter directly in the URL (header or address)?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 26 Sep 2024 06:19:12 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/create-link-on-the-dashboard/m-p/598830#M7225</guid>
      <dc:creator>AbdBgc</dc:creator>
      <dc:date>2024-09-26T06:19:12Z</dc:date>
    </item>
  </channel>
</rss>

