Link Incidents - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-02-14
Last date published
2024-04-15
Category
Administrator Guide
Solution
Cloud
Abstract

Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI. .

You can link or unlink incidents through the following:

  • A pre-process rule, so that as soon as an incident is ingested into Cortex XSOAR it is linked to an existing incident.

  • Using the CLI.

After you link the incident, you can view linked incidents in the Case Info tab.