Creating a Custom Issue For a Case

michaelsysec242 — Thu, 15 May 2025 14:49:27 GMT

Hello LiveComm,

I have created a custom case with a single Issue for a Use-Case.

I want to create more issues with a command or script in this custom case which will eventually be a playbook task. How does one do such an action?

Many thanks,

MSysec

Re: Creating a Custom Issue For a Case

michaelsysec242 — Tue, 20 May 2025 11:10:01 GMT

I have received a solution from Palo Alto directly (Name Omitted). We can use the external API for XSIAM by using the "Create a Custom Alert". Take note that this creates a new issue, and is recommended that you define at least a Low Severity in order to see it in the issues menu. I hope that Palo Alto updates their API documentation to reflect Cases and Issues instead of Incidents and Alerts so that we could avoid this ping-pong. I hope this helps people who have the same issue as me.

MSysec.

Link to API DOCs Alert Command.

topic Creating a Custom Issue For a Case in Cortex XSIAM Discussions

Creating a Custom Issue For a Case

Re: Creating a Custom Issue For a Case