From the Incidents page to the Alerts table, can you use/share those filters to make Automation rules?

[A.Duscio]

I have created some filters (via the Alerts table) while doing some investigations. It ended up being useful and needing an automation rule. However, when I went to the automation page and looked at the filters, they were blank. I shared the filters within the Alerts table, and they still weren't there. 

Is there a way to share/Import or copy these filters from the Alerts table to the Automation Rule filters? I tried copying the data from the filter but that didnt work and it would be a pain to copy the whole thing again, making me do the work twice.

Thank you

[davida]

---

@A.Dusciodry needling wrote:

I have created some filters (via the Alerts table) while doing some investigations. It ended up being useful and needing an automation rule. However, when I went to the automation page and looked at the filters, they were blank. I shared the filters within the Alerts table, and they still weren't there. 

Is there a way to share/Import or copy these filters from the Alerts table to the Automation Rule filters? I tried copying the data from the filter but that didnt work and it would be a pain to copy the whole thing again, making me do the work twice.

Thank you

---

To transfer filters from the Alerts table to Automation Rule filters, you need to:

1. Export the filter configuration from the Alerts table (if supported).
2. Import or manually recreate the filters in the Automation Rule section.

Unfortunately, direct copying or automatic sharing of filters between different sections might not be supported. Check if Palo Alto Networks provides any specific tools or documentation for migrating or sharing filters between modules.

[A.Duscio]

Thank you for the reply. It doesnt appear to be supported, which is absurd IMO. Its all the same fields, they just didnt think about adding that in. Thank you for your help and if you find another way at some point, please let me know.