Link Incidents - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-10-14
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

Link incidents in the Related Incidents tab, using a pre-process rule, or in the CLI. .

You can link or unlink incidents through the following:

  • A pre-process rule, so that as soon as an incident is ingested into Cortex XSOAR it is linked to an existing incident.

  • Using the CLI.

After you link the incident, you can view linked incidents in the Case Info tab.