https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-automatically-resolve-alerts-issues-as-quot-known/m-p/1262709#M9518 <P class="isSelectedEnd"><SPAN>Hello Team,</SPAN></P> <P class="isSelectedEnd"><SPAN>We are using a </SPAN><STRONG><SPAN>Cortex XDR tenant</SPAN></STRONG><SPAN> and would like to know whether there is a supported way to automatically update an alert/issue resolution to </SPAN><STRONG><SPAN>"Known Issue"</SPAN></STRONG><SPAN> using a predefined command, automation, or playbook action.</SPAN></P> <P><SPAN>Our goal is to avoid manual analyst intervention for alerts that have already been validated as known benign activity and automatically mark them as </SPAN><STRONG><SPAN>Resolved - Known Issue</SPAN></STRONG><SPAN>.&nbsp;</SPAN></P> <P>&nbsp;</P> <P><SPAN><LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"></LI-PRODUCT>&nbsp;</SPAN></P> Tue, 25 Aug 2026 01:08:46 GMT RajeshPremSingh 2026-08-25T01:08:46Z https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-automatically-resolve-alerts-issues-as-quot-known/m-p/1262709#M9518 <P class="isSelectedEnd"><SPAN>Hello Team,</SPAN></P> <P class="isSelectedEnd"><SPAN>We are using a </SPAN><STRONG><SPAN>Cortex XDR tenant</SPAN></STRONG><SPAN> and would like to know whether there is a supported way to automatically update an alert/issue resolution to </SPAN><STRONG><SPAN>"Known Issue"</SPAN></STRONG><SPAN> using a predefined command, automation, or playbook action.</SPAN></P> <P><SPAN>Our goal is to avoid manual analyst intervention for alerts that have already been validated as known benign activity and automatically mark them as </SPAN><STRONG><SPAN>Resolved - Known Issue</SPAN></STRONG><SPAN>.&nbsp;</SPAN></P> <P>&nbsp;</P> <P><SPAN><LI-PRODUCT title="Cortex XDR" id="Cortex_XDR"></LI-PRODUCT>&nbsp;</SPAN></P> Tue, 25 Aug 2026 01:08:46 GMT https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/cortex-xdr-automatically-resolve-alerts-issues-as-quot-known/m-p/1262709#M9518 RajeshPremSingh 2026-08-25T01:08:46Z