topic Re: Command to close alert in xsiam in Cortex XSIAM Discussions

Command to close alert in xsiam

rathilaramesh13 — Tue, 19 Nov 2024 15:41:44 GMT

Is there a command to close alert in XSIAM?

john-lillington — Thu, 21 Nov 2024 10:00:55 GMT

Hi - You could try: !closeInvestigation

rathilaramesh13 — Thu, 21 Nov 2024 14:14:07 GMT

Thanks!
If we close all the alerts in an incident with !closeInvestigation command, will the incident also be auto closed ?

john-lillington — Thu, 21 Nov 2024 17:11:24 GMT

Yes that should be the outcome.