dashboard to view logins

Rolando_Pena — Mon, 14 Jul 2025 15:21:28 GMT

What's up community!

I'm trying to create a dashboard in Cortex XDR that allows me to see user logins and log outs.

Is this possible with XQL? Or, for example, log when the endpoint was powered on.

I would greatly appreciate the help.

#cortex #cortexxdr #xdr #XQL

Re: dashboard to view logins

eluis — Thu, 17 Jul 2025 13:06:17 GMT

Hi Rolando_Pena,

This is definitely possible in XDR, based on the data collected by cortex XDR agent.
In fact, a sample example is available in the query library of the Cortex XDR XQL search.

Using the same query and tweaking it for graph views, you can create a widget and incorporate it to your custom Dashboards.

Please review the event IDs and create the same.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR,

Luis

topic dashboard to view logins in Cortex XDR Discussions

dashboard to view logins

Re: dashboard to view logins