10-30-2025 06:35 AM
Greetings,
Im trying to configure "Automation Rules" to "High" severity issues for the automatic isolation of endpoints.
Right now its configured as the following images show, but theyre not triggering the playbooks nor rules.
¿Any ideas or suggestions on why its not triggering?
10-31-2025 05:39 AM
What tenant version are you in? Is this XSIAM or XDR 4.X?
What do your automation audit logs say? I don't see the automation lightning bolt.
10-31-2025 08:32 AM
Hello,
Its: Cortex XDR V4.2 | Pro Per Endpoint license.
No automation logs btw:
I dont know if im dumb or theres some modules i need, which dont fall in the current license.
10-31-2025 08:47 AM
Hard to say. V4.2 just dropped and it has a new automation system.
Maybe create a simple automation test to validate your logic.
You may need to target Cases instead of Issues.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
