XDR grouping

K.Sridharan — Tue, 17 Dec 2024 09:47:33 GMT

Hi Guys,

In palaalto endpoint grouping

what is static grouping
What is dynamic grouping

Where this scenario works with example

Re: XDR grouping

jmazzeo — Tue, 17 Dec 2024 15:00:47 GMT

Hi @K.Sridharan, thanks for reaching us using the Live Community.

You have a detailed definition here in our doc: https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Define-endpoint-groups

As a summary, dynamic is a group of endpoints that can increase or decrease depending in how you define it in the filter, for example if you choose Windows in the Operating System, all new windows XDR endpoints will be part of that group. The static groups are defined with specific endpoints selected "by hand", for example, some critical servers can be part of a static group with a specific group of policies applied.

If this post answers your question, please mark it as the solution.

topic XDR grouping in Cortex XDR Discussions

XDR grouping

Re: XDR grouping