Custom Widget to Show All Alerts and remediation steps

mbuckner — Wed, 29 Nov 2023 14:37:19 GMT

Hello,

I am trying to create a custom XQL widget to show all non info alerts and the suggested remediation steps in last . Please advise!

Re: Custom Widget to Show All Alerts and remediation steps

nsinghvirk — Thu, 30 Nov 2023 15:56:42 GMT

Hello @mbuckner ,

Thanks for reaching out on LiveCommunity!

To create a custom widget, you can use 'alerts' dataset and then filter out results based on various parameters like severity, host, user etc. but you will not be able to query remediation suggestions for these alerts. Remediation suggestions are not available through XQL query, you can only access them in causality view and for specific alert types. Otherwise you can get details about incidents and alerts in Incident Management dashboard.

topic Re: Custom Widget to Show All Alerts and remediation steps in Cortex XDR Discussions

Custom Widget to Show All Alerts and remediation steps

Re: Custom Widget to Show All Alerts and remediation steps