Update Alerts

Update one or more alerts. Required license for running the action: Cortex Xpanse Expander.

External Documentation

To learn more, visit the Cortex Xpanse documentation.

Parameters

Parameter	Description
Alert IDs	A comma-separated list of the alerts to update.
Comment	Descriptive comment explaining the alert change.
Severity	The severity of the alert.
Status	The status of the alert.

Example Output

{
    "reply": {
        "alerts_ids": [
            0
        ],
        "additionalProp1": {}
    },
    "additionalProp1": {}
}

Workflow Library Example

Update Alerts with Cortex Xpanse and Send Results Via Email

Preview this Workflow on desktop