There is no alert severity in the SIEM logs.

[Aristooo]

Hi. We send Cortex XDR syslog to SIEM. When I check Notification (Settings - Configurations - Notifications) settings, Severity field is available. But on SIEM logs, there is not severity of alert. 

[jmazzeo]

Hi @Aristooo, thanks for reaching us using the Live Community.

The severity field is sent with the forwarding integration using syslog. You can check our documentation with the message format here, maybe your SIEM is not parsing that field with the correct format.

If this post answers your question, please mark it as the solution.