Cortex Copilot layout - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Product
Cortex XSIAM
Creation date
2024-03-06
Last date published
2025-02-18
Category
Administrator Guide
Abstract

Understand the main components in Cortex Copilot: search bar, insights and suggestions, action log, and feedback.

Cortex Copilot consists of the following primary components:

The search bar is located at the top of the Cortex Copilot screen. This is where you interact with Cortex Copilot, providing a centralized location to access assistance, obtain insights, and navigate the platform efficiently.

You can find Cortex Copilot's responses to your queries in the insights and suggestions area. The insights section includes all the important information Cortex Copilot can provide in response to your query.

Below that, Cortex Copilot offers suggestions, which are divided into three columns, each with specific functionalities:

  • Investigate: Choose from recommended relevant questions you can ask to further your investigation. Responses leverage advanced XQL queries.

  • Respond: Take action by running recommended playbooks or scripts, enabling you to initiate response actions based on Cortex Copilot's suggestions.

  • Navigate: Ask the Help Center or navigate to related pages in Cortex XSIAM.

The action log in Cortex Copilot serves as a historical record of your interactions and prompts. It maintains a log of each conversation separately, including the date and time of each prompt you enter.

Any changes made to the prompt text is recorded as a new conversation in the action log. This means that each prompt and its associated actions are logged separately, allowing you to clearly track and review your interactions with Cortex Copilot. You can rerun a conversation or delete a conversation from the action log. Opening a new tab or refreshing the current tab will not reset the action log.

In addition to tracking your prompts, the action log enables you to provide feedback on Cortex Copilot's response. You can do this by clicking on the thumbs-up or thumbs-down icons. If you choose to give feedback, you have the option to provide as much detailed information as you like, helping to improve the system's performance and accuracy.