Investigate child tenant data - In multi-tenant environments, you can view, track, and investigate data across your Cortex XDR child tenants. - Administrator Guide - Cortex XSIAM - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-04
Category
Administrator Guide
Abstract

In multi-tenant environments, you can view, track, and investigate data across your Cortex XDR child tenants.

With Cortex XDR multi-tenancy, you can investigate the Cortex XDR child tenant data.

By default, Cortex XDR displays data for your tenant. To display data for your child tenant, select the tenant from the drop-down.

mssp-select-tenant.png

Some common tasks that you might perform include:

  • Investigate incidents on a child tenant.

  • Investigate alerts on a child tenant.