Notification if Cortex XDR agent fails to upgrade

DopedWafer — Wed, 15 Feb 2023 17:47:57 GMT

Is there any sort of notification I can setup within Cortex XDR to notify me if any agents are failing to properly upgrade to a new version on our endpoints?

Thanks

Re: Notification if Cortex XDR agent fails to upgrade

etugriceri — Thu, 16 Feb 2023 08:51:58 GMT

Hi @DopedWafer

You can create new notification for Agent Audit Logs. (Settings>Configurations>Notifications)

Create new configuration and Select log type "Agent Audit Logs" and filter like "Result = Fail and Type = Installation"

XDR are able send notifications via either email or syslog.

I hope that helps.

topic Notification if Cortex XDR agent fails to upgrade in Cortex XDR Discussions

Notification if Cortex XDR agent fails to upgrade

Re: Notification if Cortex XDR agent fails to upgrade