View Child Tenant Data
With Cortex XDR managed security, you can
view Cortex XDR child tenant data.
By default, Cortex XDR
displays data for your tenant. To display the child tenant data,
select the tenant from the drop-down.
Access
the following child tenant data:
- Incidents
- Navigate to .
- Right-click toView Incident.Cortex XDR opens the Incident View.
- In theIncident Viewpage, view the incident details and right-click the event table rows to investigate further.
- Alerts
- Navigate to .
- In theAlertstable, right-click and selectAnalyze.
- In theCausality View, view the alert details and right-click the event table rows to investigate further.
- Query Builder
- Navigate to .
- Run a query based on the child tenant Cortex XDR data.
- View the query results.
- Query Center
- Navigate to .The Query Center displays queries you ran on your tenant and the child tenants.
- Apply a filter to theTenantfiled to view queries according to the specific tenants.
