topic Help finding green alert log screen in Cortex XDR in Cortex XDR Discussions

Help finding green alert log screen in Cortex XDR

cdeter — Thu, 21 Sep 2023 20:58:05 GMT

We were reviewing the latest MITRE results and Palo Alto kicked butt! However, looking through the screenshots https://attackevals.mitre-engenuity.org/results/enterprise?vendor=paloaltonetworks&evaluation=turla&scenario=1 we don't have the same green alert log screen in our Cortex XDR console.

Does anyone know how to get this screen to show up when looking at an alert?

Re: Help finding green alert log screen in Cortex XDR

neelrohit — Fri, 22 Sep 2023 04:58:50 GMT

Hi @cdeter ,

Thank you for writing to the live community!

The green alert log shows the debug data collected by Cortex XDR agent with respect to the endpoint data collection to stitch an alert. You can get the same data when you forward alerts to your mailbox.

Alternatively, if you want to look at this data on the Cortex XDR console, you can follow the below:

Navigate to the alert you want to see the debug data for.
Press the Alt key(for Windows)/option key(for MacOS)
Right click along with the alt/option key pressed. You should have multiple options coming through
Scroll down to the last option and you should be able to see Debug Alert option.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

Re: Help finding green alert log screen in Cortex XDR

cdeter — Fri, 22 Sep 2023 05:50:44 GMT

Thank you!

Re: Help finding green alert log screen in Cortex XDR

Germain_Prieto — Tue, 09 Apr 2024 20:44:42 GMT

Estimados, para la version Cortex XDR agent 8.3 fue deshabilitado? ya que no aparece dicha opcion "debug log" haciendo clic derecho.

Saludos.

Re: Help finding green alert log screen in Cortex XDR

jmazzeo — Tue, 09 Apr 2024 20:51:38 GMT

Hola @Germain_Prieto, la función indicada por @neelrohit puede verse en la consola de XDR, en la vista de Alertas. No es una función del agente.