topic Re: Filter incidents on action in Cortex XDR in Cortex XDR Discussions

Filter incidents on action in Cortex XDR

ElisabethNordentoft — Fri, 04 Nov 2022 12:24:32 GMT

Hello,

I would like to filter incidents on what kind of actions have been taken. Is this available or should I make a feature request somehow?

Ie. filter on all incidents containing alerts that have prevented as action. Or Filter out any where the action is allowed.

Best regards/Elisabeth

Re: Filter incidents on action in Cortex XDR

neelrohit — Fri, 04 Nov 2022 14:00:51 GMT

Hi @ElisabethNordentoft ,

Thank you for writing to live community!

we can filter alerts by actions but as of now we do not have incidents by actions as incidents are not aggregated by actions but by host and artefacts. Hence the feature is not available.

please request a feature request for the same.

regards

Re: Filter incidents on action in Cortex XDR

ElisabethNordentoft — Fri, 04 Nov 2022 14:05:17 GMT

Hi,
Thanks for the answer. I've looked into making a feature request, but from what I understand I have to reach out to our own sales representative? If the feature has already been requested I should be able to vote for it. Do you know where I can do that?

Best regards/Elisabeth