Create ticket in external ticketing system when an incident is generated?

[D.Stabinsky]

I'm trying to figure out if it's possible to have Cortex XDR create a ticket in our ticketing system via Web API when an incident is generated.

I know it's possible to send a slack message when an alert is generated, then use slack to call the API, but I don't want to create a ticket for every alert.

[eluis]

Hi @D.Stabinsky 

You can use the API 

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR-REST-API/Get-all-Incidents

With some scripting, I believe you could manage to open a ticket on a 3rd party (it the app allows you to do so) using your script, maybe a call to your ticketing system API sending data read from XDR API

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". 

Thank you.