Manage instances - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-16
Category
Administrator Guide

You can manage the instances configured for a data source on the Data Sources & Integrations page. You can edit, delete, enable, or disable instances, and refresh log data.

  1. Navigate to SettingsData Sources & Integrations.

  2. Find an integration by clicking on a data source name in the table or filtering for it, then select the data source.

  3. Right click the relevant instance. From the menu, you can perform actions such as:

    • Enable or disable an Instance.

    • Refresh log data (by selecting Refresh).

    • Edit the instance.

    • Delete the instance.

      If you delete all the instances for a Data Source, the Data Source is not listed on the Data Sources & Integrations page.