Link Incidents - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-28
Category
Administrator Guide
Abstract

Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI. .

You can link or unlink incidents through the following:

  • A pre-process rule, so that as soon as an incident is ingested into Cortex XSOAR it is linked to an existing incident.

  • Using the CLI.

After you link the incident, you can view linked incidents in the Case Info tab.