I wonder if there is a method to export the excluded alert from a Cortex XDR tenant and import this exported excluded alert into another Cortex tenant.
If I export the alert from the console filtering the alerts excluded=yes, I can download a .tsv file, but I don't know how to import this exclusions in the other tenant.
I also tried to use API keys, but if I would to filter the alerts by excluded=yes, I received the error that "excluded" isn't a valid filter field.
How can I do this thing? If it is possible
... View more