Get notified when a case is assigned

[SeanDeHarris]

Hello XDR experts,

Is there a way to configure sending an notification by email to whom the case/incident was assigned?

Cannot find any hints 

Thanks 

Sdg 

Cortex XDR 

[susekar]

Hello @SeanDeHarris ,

Greetings for the day,

Direct, immediate email notification to a specific individual based solely on incident assignment is currently a product limitation in standalone Cortex XDR. While you can configure notifications for when an incident is assigned, these typically go to a predefined distribution list rather than dynamically routing to the specific assignee's email address.

However, there are ways to manage and configure incident/case notifications depending on your version and environment:

1. General Assigned Incident Notifications (Distribution List)

You can configure Cortex XDR to send an email to a team distribution list whenever any incident is marked as Assigned.

1. Navigate to Settings → Configurations → General → Notifications.
2. Click + Add Forwarding Configuration.
3. Set the Log Type to Alerts or Incidents (depending on your version).
4. Filter the Sub-type field and select Assigned Incident.
5. Under Distribution List, enter the email address or group address that should receive the notification.

2. User Notifications (Cortex XDR 4.0 / XSIAM)

In newer platform versions, notifications are triggered when a case is resolved or assigned, and these are sent to the assigned user.

• Users can manage these personal notifications through Default User Notifications in their profile settings.

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".

Thanks & Regards,
S. Subashkar Sekar