From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules?

A.Duscio — Thu, 29 Aug 2024 21:35:50 GMT

I have created some filters (via the Alerts table) while doing some investigations. It ended up being useful and needing an automation rule. However, when I went to the automation page and looked at the filters, they were blank. I shared the filters within the Alerts table, and they still weren't there.

Is there a way to share/Import or copy these filters from the Alerts table to the Automation Rule filters? I tried copying the data from the filter but that didnt work and it would be a pain to copy the whole thing again, making me do the work twice.

Thank you

Re: From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules?

A.Duscio — Fri, 30 Aug 2024 15:17:31 GMT

Thank you for the reply. It doesnt appear to be supported, which is absurd IMO. Its all the same fields, they just didnt think about adding that in. Thank you for your help and if you find another way at some point, please let me know.

topic Re: From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules? in Cortex XDR Discussions

From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules?

Re: From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules?