Set an alias for an endpoint

Set an alias to identify an endpoint more clearly in Cortex XSIAM.

To identify one or more endpoints by a name that is different from the endpoint hostname, you can configure an alias. You can set an alias for a single endpoint or set an alias for multiple endpoints in bulk. To quickly search for the endpoints during an investigation and when you need to take action, you can use either the endpoint hostname or the alias.

1. Select Inventory → Endpoints → All Endpoints.
2. Select one or more endpoints.
3. Right-click anywhere in the endpoint rows.
4. Select Endpoint Control → Change Endpoint Alias.
5. Enter the alias name and click Update.

Tip:

If you change your mind, select Endpoint Control → Change Endpoint Alias again, and delete the required aliases.

1. Use the Quick Launcher to search for endpoints by alias across Cortex XSIAM.