Help finding green alert log screen in Cortex XDR

[cdeter]

We were reviewing the latest MITRE results and Palo Alto kicked butt! However, looking through the screenshots https://attackevals.mitre-engenuity.org/results/enterprise?vendor=paloaltonetworks&evaluation=turla&... we don't have the same green alert log screen in our Cortex XDR console. 

Does anyone know how to get this screen to show up when looking at an alert? 

[neelrohit · Accepted solution]

Hi @cdeter ,

Thank you for writing to the live community!

The green alert log shows the debug data collected by Cortex XDR agent with respect to the endpoint data collection to stitch an alert. You can get the same data when you forward alerts to your mailbox. 

Alternatively, if you want to look at this data on the Cortex XDR console, you can follow the below:

1. Navigate to the alert you want to see the debug data for.
2. Press the Alt key(for Windows)/option key(for MacOS)
3. Right click along with the alt/option key pressed. You should have multiple options coming through
4. Scroll down to the last option and you should be able to see Debug Alert option.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.

[cdeter]

Thank you!

[Germain_Prieto]

Estimados, para la version Cortex XDR agent 8.3 fue deshabilitado? ya que no aparece dicha opcion "debug log" haciendo clic derecho.

Saludos.

[jmazzeo]

Hola @Germain_Prieto, la función indicada por @neelrohit puede verse en la consola de XDR, en la vista de Alertas. No es una función del agente.