dashboard to view logins

[Rolando_Pena]

What's up community!

I'm trying to create a dashboard in Cortex XDR that allows me to see user logins and log outs.

Is this possible with XQL? Or, for example, log when the endpoint was powered on.

I would greatly appreciate the help.

#cortex #cortexxdr  #xdr #XQL   

[eluis]

Hi Rolando_Pena, 

This is definitely possible in XDR, based on the data collected by cortex XDR agent. 
In fact, a sample example is available in the query library of the Cortex XDR XQL search. 

Using the same query and tweaking it for graph views, you can create a widget and incorporate it to your custom Dashboards.

Please review the event IDs and create the same.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

KR, 

Luis