I have a few XDR deployments I manage and one this I miss is the ability to tag objects like I can on firewalls.
This would be useful for a number of tasks from:
- filtering views/dashboards/reports
- adding agents to dynamic agent groups
- assigning policies to agents
Often hardware or OS level details are not variable enough to filter and having to manage static groups to handle things can get clunky where tags on an agent would allow the admin to move agents in and out of different policies/groups easily.
Hi @Brett_Hobbs ,
This is possible by applying "Endpoint Aliases" to your endpoints. Once configured, you can group dynamically by the alias, focus dashboards, and reports based upon that group and apply policies based upon either the group or the alias.
Click here for more information on Endpoint Aliases.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!