External Data Ingestion and Management - Cortex XSIAM

Cortex XSIAM 3.x Release Notes

Product
Cortex XSIAM
Last date published
2026-06-09
FEATURE DESCRIPTION

Unified data onboarding experience

Save time and reduce complexity by managing all data sources and Marketplace integrations from a single, streamlined location. We renamed the Data Sources page to Data Sources & Integrations to eliminate the need for multiple portals when configuring content like correlation rules, dashboards, and playbooks. This unified workflow creates a more efficient experience for managing all your ingestion and automation needs.

This change merges the functional scope of existing permissions. Users, user groups, and API keys with View/Edit permissions for either Data Sources or Integrations now have full access to manage both on the unified page. Review your administrative assignments to ensure they align with this expanded access.

Accurate Authentication Story logic

Improve your detection precision. Identify threats more accurately with refined logic that ensures only high-quality, fully contextualized data generates authentication stories. We updated the mandatory field requirements, including making the outcome reason field optional, to focus on the most relevant data.