topic Adding a list when applying a filter in Cortex XDR Discussions

Adding a list when applying a filter

NathanBradley — Fri, 08 Jul 2022 18:25:53 GMT

Is there a way to take a list and apply as a filter, without adding each one separately

For example, below pasting in a list of endpoint names. instead of typing each one individually

Re: Adding a list when applying a filter

Mudhireddy — Sat, 09 Jul 2022 15:13:34 GMT

Hi Nathan,

Using Dynamic end-point groups you can implicitly define group membership using dynamically evaluated endpoint characteristics such as partial hostnames or aliases, full or partial domain names, IP address ranges or subnets, and agent or operating system versions.

The Endpoint Groups page is accessible from Endpoints > Endpoint Management > Endpoint Groups. The page displays all endpoint groups along with the number of endpoints.

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/endpoint-security/define-endpoint-groups

Re: Adding a list when applying a filter

NathanBradley — Mon, 11 Jul 2022 15:44:30 GMT

This isn't specific to Endpoints

Can I supply a list to any available field that i can filter on

Example below: i want to only show 13 separate applications listed. It appears that I have to type one application and then hit the little blue arrow to drop it down, then type another application hit the blue arrow...etc 13 times

Can I just paste in, supply a list of the 13 applications, txt file, something so I don't have to type it in 13 times

Maybe a feature request if not available

Re: Adding a list when applying a filter

RuiGomes — Wed, 10 Jan 2024 12:19:05 GMT

To anyone with the same question, you could create a static group from a txt file with the list of ips.

And then filter endpoints by that group name.