Notification if Cortex XDR agent fails to upgrade

[DopedWafer]

Is there any sort of notification I can setup within Cortex XDR to notify me if any agents are failing to properly upgrade to a new version on our endpoints?

Thanks

[etugriceri]

Hi @DopedWafer 

You can create new notification for Agent Audit Logs. (Settings>Configurations>Notifications) 

Create new configuration and Select log type "Agent Audit Logs" and filter like "Result = Fail and Type = Installation"

XDR are able send notifications via either email or syslog.

I hope that helps.