View Guard Rails warnings and errors - Use the Cortex XSOAR Guard Rails page to see details about errors or warnings that could affect system performance. - Administrator Guide - 8.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation

Product
Cortex XSOAR
Version
8.5
Creation date
2024-03-10
Last date published
2025-12-17
End_of_Life
EoL
Category
Administrator Guide
Solution
On-prem
Abstract

Use the Cortex XSOAR Guard Rails page to see details about errors or warnings that could affect system performance.

The Cortex XSOAR Guard Rails page provides a list of warnings and errors that occur during incident ingestion, investigation, and response. Guard Rails allow you to detect potential misconfigurations and help you optimize your automation settings to maintain peak system performance.

Cortex XSOAR Guard Rails page

The Cortex XSOAR Guard Rails page displays a table with a list of warnings and errors and their details.

Errors and warnings may be generated for unusually high levels of incident ingestion, unusually large attachments, unusually large numbers of entries in an incident, and other situations that could affect system performance.

Access the Guard Rails page from Cortex XSOAR Settings & InfoSettingsSystem.

The table shows the following information:

  • ID: (by default hidden) The log number.

  • Timestamp: The date time the error or warning occurred.

  • Type: The object type the error or warning occurred on, for example incident or indicator.

  • Subtype: The object subtype (N/A if it doesn't exist), for example entries or attachments.

  • Level: Whether the item is an error or a warning.

  • Object ID: The ID of the restricted object.

  • Count: The number of times a specific item occurred in the last calendar day.

  • Description: A short description of the error or warning.