Link and Unlink incidents in the CLI

Link and unlink incidents using the CLI in Cortex XSOAR.

You can link and unlink incidents in the CLI. The linked incidents appear in the

Case Info

tab.

To link an incident, in the CLI, type the following command:

!linkIncidents linkedIncidentIDs=<id> action=link

Confirmation of the linked incident appears in the War Room and in the

Case Info

tab. In this example, we have linked the incident ID#3

To unlink the incident, type the following command:

!linkIncidents linkedIncidentIDs=<id> action=unlink

Document:Cortex XSOAR Administrator’s Guide