Abstract
Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI.
You can link or unlink incidents through the following:
In the Related Incidents tab.
A pre-process rule, so that as soon as an incident is ingested into Cortex XSOAR it is linked to an existing incident.
Using the CLI.
After you link the incident, you can view linked incidents in the Case Info tab.
 |