Update one or more alerts. Required license for running the action: Cortex Xpanse Expander.
External DocumentationTo learn more, visit the Cortex Xpanse documentation.

​
Parameters

ParameterDescription
Alert IDsA comma-separated list of the alerts to update.
CommentDescriptive comment explaining the alert change.
SeverityThe severity of the alert.
StatusThe status of the alert.

​
Example Output

{
	"reply": {
		"alerts_ids": [
			0
		],
		"additionalProp1": {}
	},
	"additionalProp1": {}
}

​
Workflow Library Example

Update Alerts with Cortex Xpanse and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop