topic Possible to View the XQL Query of Widgets? in Cortex XSIAM Discussions

Possible to View the XQL Query of Widgets?

PA_nts — Tue, 17 Jun 2025 07:51:18 GMT

Hi All,

So XSIAM has a bunch of built in widgets and I want to amend some of these.. is there a way to determine the Query used within so that i can use this to adapt to my custom query?

thanks in adv

Re: Possible to View the XQL Query of Widgets?

A.Elzedy — Tue, 17 Jun 2025 17:04:40 GMT

Hi @PA_nts ,

Unfortunately, you can't directly access or modify the queries used in XSIAM's predefined/built-in widgets. These were made by Palo Alto and aren't exposed for customization.

However, you may be able to replicate some of these widgets by creating custom ones, though keep in mind that not all backend data sources are accessible through XQL. For example, threat intelligence data and some other internal data sources aren't available for custom queries.

Re: Possible to View the XQL Query of Widgets?

amcdonal363 — Thu, 31 Jul 2025 09:19:12 GMT

boo to the decision by Product not to expose the widget logic.