Delete context data from a case - You can delete context data from a case by running a command in the Case War Room or the issue War Room. - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-16
Category
Administrator Guide
Abstract

You can delete context data from a case by running a command in the Case War Room or the issue War Room.

Run the !deleteParentIncidentContext command to delete all context data or a specific key in the Case War Room or issue War Room.

Use the issue War Room

  1. Open an issue and select the War Room tab.

  2. Run the !deleteParentIncidentContext command.

Use the case War Room

  1. Open a case and switch to the Detailed View.

  2. Select the Case War Room tab.

  3. Run the !deleteParentIncidentContext command.

Example 110. Example

The following example deletes the key and value hello:world from the case or issue context.

!deleteParentIncidentContext key="hello" value="world"