Resolution Center - Review the remediation action in the Resolution Center to start resolving a case. - Administrator Guide - Cortex CLOUD

Cortex Cloud Runtime Security Documentation

Product
Cortex Cloud Application Security > Cortex CLOUD
License
Cloud Runtime Security
Creation date
2024-12-24
Last date published
2026-06-04
Category
Administrator Guide
Abstract

Review the remediation action in the Resolution Center to start resolving a case.

The Resolution Center is the primary workspace for managing and resolving cases. With a focused, action-oriented flow, you can focus on resolving the entire case rather than investigating isolated issues. By removing fragmented navigation, this workspace allows you to work without context switching, enabling you to open and run playbooks within the case context and quickly review the status of all tasks for all issues in the case.

The Resolution Center guides you toward resolution by answering the question, What should I do next? You can track your progress using four specialized tabs:

Pending

Your to-do list for case actions. This tab displays any tasks waiting for execution or tasks that require your input.

  • Task details: View the task summary and assignee, listed in order they were created.

  • Play book execution: Each task shows its source (Issue ID and Automation Name). You can click the Issue ID to open the issue card or click the playbook to open the workplan.

    If a playbook is already in progress but requires user input, the label shows the status of the playbook. Click the label to open the Workplan and directly execute the playbook task.

Note

Tasks that are already In Progress but require your input will appear in both the Pending and In Progress tabs.

Recommended

Lists suggested playbooks and response actions to help remediate issues linked to the case.

  • Task details: View details of recommended tasks, including the name of the source that triggered the recommendation.

  • Consolidated tasks: If the same action is recommended for multiple issues, it is only listed once. Review the labels on a task to see the issues for which the task is relevant.

  • Playbook execution: Click a playbook to preview and execute it in the Work Plan. If the playbook applies to multiple issues, you can choose which issues to run it against.

  • Recommended response actions: Click a recommended action to open a dialog with detailed steps for executing the action.

In Progress

Track automations that are currently running and remediation workflows in real time.

  • Real-time tracking: View all active playbooks, including those in the run queue.

  • Status details: Each record includes the playbook name, related issue, and current status (Error, Waiting, or Running).

  • Navigation: Click a playbook to open the Work Plan or click an Issue ID to view the associated issue card.

Done

Review an audit trail of resolution steps.

You can review a list of completed playbooks, automations, and actions that ran on the issues in the case. Records includes the playbook name, the related issue, the completion time, and the final status.