topic Dead Space in Cortex XDR Discussions

Dead Space

G.Pereira950193 — Mon, 11 May 2026 17:21:07 GMT

This has been bothering me for a while. Look at all this useless space that is taken up now! 1/3 of the screen is useless. I wish I could scroll it away, but we are forced to deal with it. The information I need to actually review is even further down in the bottom 40% of the screen.

Re: Dead Space

susekar — Tue, 12 May 2026 14:14:35 GMT

Hello @G.Pereira950193 ,

Greetings for the day.

Viewing Formats and Modes:

The Cases page (found under Cases & Issues → Cases) supports different display and behavior modes that may impact how much information is visible.

• Split View (Default): Uses a split-pane "mailbox" layout that highlights key details.

• Table View: Displays cases in a standard table format with customizable widgets summarizing the data. Switching to this view may help consolidate information.

• Legacy Mode: Administrators can enable this mode to use the previous experience for backward compatibility. However, the Default Mode was specifically designed for high-density data visualization and optimized column widths.

To toggle mode (Admin only):
Navigate to Configurations → General → Server Settings → Case display modes.

Note: There are currently no identified Jira issues (CRTX or XSUP) tracking a defect regarding the unused space in the query builder UI.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".

Thanks & Regards,
S. Subashkar Sekar

Re: Dead Space

G.Pereira950193 — Tue, 12 May 2026 15:55:01 GMT

Unfortunately, this does address the underlying issue which is the UI itself. There is still a large amount of unusable space. You gain a little more in table view, but table view takes a lot of details away in exchange. Its also a little slower as it has to launch each case from the table.

I prefer the split view because I can scroll through multiple events and select repeat cases and group them together. The information is right next to the case list (which I believe was standard before the last big upgrade that changed everything) and is how I prefer my workflow. However, now half the screen is literally nothing,