Create ticket in external ticketing system when an incident is generated?

D.Stabinsky — Tue, 07 Oct 2025 14:31:22 GMT

I'm trying to figure out if it's possible to have Cortex XDR create a ticket in our ticketing system via Web API when an incident is generated.

I know it's possible to send a slack message when an alert is generated, then use slack to call the API, but I don't want to create a ticket for every alert.

Re: Create ticket in external ticketing system when an incident is generated?

eluis — Fri, 10 Oct 2025 11:46:02 GMT

Hi @D.Stabinsky

You can use the API

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Get-all-Incidents

With some scripting, I believe you could manage to open a ticket on a 3rd party (it the app allows you to do so) using your script, maybe a call to your ticketing system API sending data read from XDR API

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".

Thank you.

topic Re: Create ticket in external ticketing system when an incident is generated? in Cortex XDR Discussions

Create ticket in external ticketing system when an incident is generated?

Re: Create ticket in external ticketing system when an incident is generated?