Filter incidents on action in Cortex XDR

[ElisabethNordentoft]

Hello, 

I would like to filter incidents on what kind of actions have been taken. Is this available or should I make a feature request somehow?

Ie. filter on all incidents containing alerts that have prevented as action. Or Filter out any where the action is allowed. 

Best regards/Elisabeth

[neelrohit · Accepted solution]

Hi @ElisabethNordentoft ,

Thank you for writing to live community!

we can filter alerts by actions but as of now we do not have incidents by actions as incidents are not aggregated by actions but by host and artefacts. Hence the feature is not available.

please request a feature request for the same.

regards

[ElisabethNordentoft]

Hi,
Thanks for the answer. I've looked into making a feature request, but from what I understand I have to reach out to our own sales representative? If the feature has already been requested I should be able to vote for it. Do you know where I can do that?

Best regards/Elisabeth