Forward Cortex AgentiX logs and data to external services

Forward Cortex AgentiX logs, cases, and issues to Slack, syslog, email, Splunk, Amazon SQS, Amazon S3, and webhooks.

Use Cortex AgentiX log forwarding and data forwarding to send logs, cases, and issues to external services. Forwarded data supports alert management, investigations, and data retention in external systems.

You can forward notifications to these external services:

• Slack channel and/or syslog receiver: Configure the external application in Cortex AgentiX. Then configure notification forwarding and select the data or log type.
• Email distribution list: Configure notification forwarding and select the data or log type.
• Splunk, Amazon SQS, Amazon S3, and Webhook: Forward cases and issues only. Configure the external application in Cortex AgentiX and egress in Cortex Gateway first.

Supported data types by notification destination

Data/log type	Email	Slack	Syslog	Splunk, Amazon SQS, Amazon S3, Webhook
Issues	✅	✅	✅	✅
Cases	✅	✅	—	✅
Management Audit Logs	✅	—	✅	—
Health Issues (Deprecated)	✅	✅	✅	—