topic Re: Cortex XDR - Automation Rules in Cortex XDR Discussions

Cortex XDR - Automation Rules

L.Aguero — Thu, 30 Oct 2025 13:35:07 GMT

Greetings,

Im trying to configure "Automation Rules" to "High" severity issues for the automatic isolation of endpoints.

Right now its configured as the following images show, but theyre not triggering the playbooks nor rules.

¿Any ideas or suggestions on why its not triggering?

ChrisDavila — Fri, 31 Oct 2025 12:39:50 GMT

What tenant version are you in? Is this XSIAM or XDR 4.X?

What do your automation audit logs say? I don't see the automation lightning bolt.

L.Aguero — Fri, 31 Oct 2025 15:32:38 GMT

Hello,
Its: Cortex XDR V4.2 | Pro Per Endpoint license.

No automation logs btw:

I dont know if im dumb or theres some modules i need, which dont fall in the current license.

ChrisDavila — Fri, 31 Oct 2025 15:47:07 GMT

Hard to say. V4.2 just dropped and it has a new automation system.

Maybe create a simple automation test to validate your logic.

You may need to target Cases instead of Issues.