Automate changes to issue fields using timer scripts - Create scripts to perform specific actions in Cortex XSIAM when a timer field times out - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Scripts in Cortex XSIAM enable you to automate processes. You can create scripts that perform specific actions when a timer field times out. Scripts used with timers must have the SLA tag.

You can use an out-of-the-box or custom script and attach it to an timer issue field.

A common use of scripts for timer fields is to send an email when a timer is breached. You can create a custom script that sends an email to specific users when the script is triggered. You can add this to any timer issue field as needed.