This is not possible. MT environments enforce data segregation.
You can do this via the API. You can run an external script that connects to Cortex's API via specific tenant URLs and API Keys. The script would then combine the data.
Regarding your last question. You can view incidents from all tenants on master's incident page. Screenshot below.
Is there a way to monitor jobs from multiple tenants? API or Playbook task? We have multiple tenants and some of the jobs, from various tenants, are erroring or hanging and we would like to write a script that would be able to report out on this. Currently we are having to manually check the jobs in XSOAR.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!