https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/closing-qradar-alert-from-xsoar/m-p/452833#M462 <P>Hi Guys,</P><P>&nbsp;</P><P>Facing bit of a hiccup on playbook creation for Qradar. After the XSOAR incident closure I need to<STRONG> close the same alert</STRONG> related to that incident on Qradar too. However I cant find any function to do that in the documentation, I would really appreciate if someone can shed some light on it.</P> Mon, 13 Dec 2021 13:51:17 GMT vidurasupun 2021-12-13T13:51:17Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/closing-qradar-alert-from-xsoar/m-p/452833#M462 <P>Hi Guys,</P><P>&nbsp;</P><P>Facing bit of a hiccup on playbook creation for Qradar. After the XSOAR incident closure I need to<STRONG> close the same alert</STRONG> related to that incident on Qradar too. However I cant find any function to do that in the documentation, I would really appreciate if someone can shed some light on it.</P> Mon, 13 Dec 2021 13:51:17 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/closing-qradar-alert-from-xsoar/m-p/452833#M462 vidurasupun 2021-12-13T13:51:17Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/closing-qradar-alert-from-xsoar/m-p/453282#M463 <P>If someone came across the same issue, use the automation&nbsp;<SPAN>qradar-offense-update,</SPAN></P><P><SPAN>To figure out the closing _reason_id and closing_reason_name issue the command&nbsp;!qradar-closing-reasons then pick a reason.</SPAN></P> Wed, 15 Dec 2021 01:33:10 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/closing-qradar-alert-from-xsoar/m-p/453282#M463 vidurasupun 2021-12-15T01:33:10Z