> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar.md). # Customize Cortex XSOAR - [Customize and Configure Cortex XSOAR](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar.md): Customize and configure Cortex XSOAR 6.14 incidents, playbooks, data, reporting, and system settings. - [Incidents](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents.md): Configure Cortex XSOAR 6.14 incident types, workflows, fields, layouts, and access controls. - [Incident Lifecycle](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle.md): Incidents are potential security threats analysts identify and remediate in Cortex XSOAR 6.14. - [Fetch Incidents From an Integration Instance](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/fetch-incidents-from-an-integration-instance.md): Fetch incidents from an integration instance in Cortex XSOAR 6.14. - [Receive Notification on an Incident Fetch Error](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-lifecycle/receive-notification-on-an-incident-fetch-error.md): Configure Cortex XSOAR 6.14 notifications for incident fetch errors. - [Incident Context Data](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-context-data.md): Learn about incident context data in Cortex XSOAR 6.14 and how to access it. - [Incident Customization](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization.md): Customize incidents in Cortex XSOAR 6.14, including types, fields, layouts, and indicator extraction. - [Create an Incident Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/create-an-incident-type.md): Create and configure incident types in Cortex XSOAR 6.14. - [Customize Incident Layouts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/customize-incident-layouts.md): Customize incident layouts for Cortex XSOAR 6.14. - [Incident Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields.md): Configure incident fields for Cortex XSOAR 6.14. - [Create a Custom Incident Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-custom-incident-field.md): Create custom incident fields in Cortex XSOAR 6.14. - [Create a Grid Field for an Incident Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-a-grid-field-for-an-incident-type.md): Create grid fields for Cortex XSOAR 6.14 incident types. - [Use Scripts with the Grid Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/use-scripts-with-the-grid-field.md): Use scripts with Cortex XSOAR 6.14 grid incident fields. - [Incident Field Trigger Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/incident-field-trigger-scripts.md): Configure Cortex XSOAR 6.14 incident field trigger scripts. - [Troubleshoot Closing Case Incident after Changing Field Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/troubleshoot-closing-case-incident-after-changing-field-type.md): Troubleshoot Cortex XSOAR 6.14 cases after changing an incident field type. - [Create an Evidence Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-customization/incident-fields/create-an-evidence-field.md): Create evidence fields for Cortex XSOAR 6.14 incidents. - [Incident De-Duplication](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication.md): De-duplicate Cortex XSOAR 6.14 incidents manually or automatically with rules, scripts, and playbooks. - [Manually De-Duplicate Incidents](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/manually-de-duplicate-incidents.md): Manually de-duplicate Cortex XSOAR 6.14 incidents. - [Automatic De-Duplication Using Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-de-duplication/automatic-de-duplication-using-scripts.md): Automate Cortex XSOAR 6.14 incident de-duplication with scripts. - [Pre-Process Rules](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules.md): Create Cortex XSOAR 6.14 pre-process rules to automate actions on incoming incidents. - [Create Pre-Process Rules for Incidents](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents.md): Create Cortex XSOAR 6.14 pre-process rules for incidents. - [Rule Actions for Pre-Process Rules](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/pre-process-rules/create-pre-process-rules-for-incidents/rule-actions-for-pre-process-rules.md): Configure rule actions for Cortex XSOAR 6.14 pre-process rules. - [Post Processing for Incidents](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents.md): Configure Cortex XSOAR 6.14 post-processing scripts to automate actions before incident closure. - [Create a Post-Processing Script](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/create-a-post-processing-script.md): Create post-processing scripts for Cortex XSOAR 6.14 incidents. - [Add a Post-Processing Script to the Incident Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/post-processing-for-incidents/add-a-post-processing-script-to-the-incident-type.md): Add post-processing scripts to Cortex XSOAR 6.14 incident types. - [War Room Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview.md): Use the Cortex XSOAR 6.14 War Room for real-time incident investigation, commands, and collaboration. - [Schedule a Command](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/schedule-a-command.md): Schedule commands in the Cortex XSOAR 6.14 War Room. - [Add a Custom Widget in the War Room](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/add-a-custom-widget-in-the-war-room.md): Add custom widgets to the Cortex XSOAR 6.14 War Room. - [War Room Indexing](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing.md): Configure War Room indexing in Cortex XSOAR 6.14. - [Index War Room Entries Using Bolt DB](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-bolt-db.md): Index Cortex XSOAR 6.14 War Room entries with Bolt DB. - [Index War Room Entries Using Elasticsearch](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/war-room-overview/war-room-indexing/index-war-room-entries-using-elasticsearch.md): Index Cortex XSOAR 6.14 War Room entries with Elasticsearch. - [Incident Access Control Configuration](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration.md): Configure Cortex XSOAR 6.14 incident and investigation access with role-based access controls. - [Limit Access to Investigations using RBAC](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/limit-access-to-investigations-using-rbac.md): Limit Cortex XSOAR 6.14 investigation access with role-based controls. - [Restrict an Investigation](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-access-control-configuration/restrict-an-investigation.md): Restrict access to Cortex XSOAR 6.14 investigations. - [Classification and Mapping](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping.md): Classify and map incoming integration data to Cortex XSOAR 6.14 incidents and indicators. - [Classify Events Using a Classification Key](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/classify-events-using-a-classification-key.md): Classify events with a classification key in Cortex XSOAR 6.14. - [Create a Mapper](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/classification-and-mapping/create-a-mapper.md): Create mappers for Cortex XSOAR 6.14 incident classification and mapping. - [Incident Mirroring](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/incident-mirroring.md): Configure Cortex XSOAR 6.14 incident mirroring with third-party applications and integrations. - [Customize Incident Close Reasons](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/customize-incident-close-reasons.md): Customize close reasons for incidents by adding a server configuration in Cortex XSOAR 6.14. - [Change the Display Name of Security Incidents](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents/change-the-display-name-of-security-incidents.md): Add a Cortex XSOAR 6.14 server configuration to change the name of security incidents from ‘incident’ to another term - cases, issues, etc. - [Playbooks](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks.md): Build and manage Cortex XSOAR 6.14 playbooks for security orchestration and response. - [What Are Playbooks?](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/what-are-playbooks.md): Understand Cortex XSOAR 6.14 playbooks for security process automation and incident remediation. - [Playbook Development](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-development.md): Develop Cortex XSOAR 6.14 playbooks to automate security workflows and response actions. - [Configure IoT Security Playbooks](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-iot-security-playbooks.md): Configure Cortex XSOAR 6.14 IoT Security playbooks for automated security workflows. - [Manage Playbook Settings](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings.md): Configure Cortex XSOAR 6.14 playbook settings, access, triggers, and Quiet Mode. - [Obtain Playbook Metadata](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/manage-playbook-settings/obtain-playbook-metadata.md): Analyze incident playbook task inputs, outputs, storage use, and task types in Cortex XSOAR 6.14. - [Version Control](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/version-control.md): Save and manage Cortex XSOAR 6.14 playbook versions during development. - [Playbook Task Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields.md): Reference fields for defining Cortex XSOAR 6.14 playbook tasks. - [Create Section Headers](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-section-headers.md): Create section headers to organize Cortex XSOAR 6.14 playbook tasks. - [Create a Conditional Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/create-a-conditional-task.md): Create conditional tasks for branching Cortex XSOAR 6.14 playbook workflows. - [Communication Tasks](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks.md): Configure Cortex XSOAR 6.14 playbook communication tasks for analyst interactions. - [Create an Ask Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task.md): Create Cortex XSOAR 6.14 Ask tasks to collect analyst responses. - [Ask Task Examples](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/ask-task-examples.md): Review Cortex XSOAR 6.14 Ask task examples for playbook communication. - [Customize an Ask Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-an-ask-task/customize-an-ask-task.md): Customize Cortex XSOAR 6.14 Ask tasks for analyst communication workflows. - [Create a Data Collection Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task.md): Create Cortex XSOAR 6.14 data collection tasks to gather analyst input. - [Data Collection Task Examples](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/data-collection-task-examples.md): Review Cortex XSOAR 6.14 data collection task examples for playbooks. - [Customize a Data Collection Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-a-data-collection-task/customize-a-data-collection-task.md): Customize Cortex XSOAR 6.14 data collection tasks for playbook workflows. - [Customize the SOC Name](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/customize-the-soc-name.md): Customize the SOC name shown in Cortex XSOAR 6.14 communication tasks. - [Create Communication Task Authentication](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/create-communication-task-authentication.md): Configure authentication for Cortex XSOAR 6.14 communication tasks. - [Add Ad Hoc Tasks to a Work Plan](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/add-ad-hoc-tasks-to-a-work-plan.md): Add ad hoc tasks to Cortex XSOAR 6.14 incident work plans. - [Handle Errors in a Playbook](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/handle-errors-in-a-playbook.md): Handle task errors in Cortex XSOAR 6.14 playbooks and automation workflows. - [Playbook Task Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-task-fields/communication-tasks/playbook-task-fields.md): Reference Cortex XSOAR 6.14 fields for communication playbook tasks. - [Playbook Inputs and Outputs](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs.md): Configure Cortex XSOAR 6.14 playbook inputs and outputs for task data flow. - [Task Cheat Sheet](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-inputs-and-outputs/task-cheat-sheet.md): Use this Cortex XSOAR 6.14 cheat sheet for playbook task configuration. - [Extend Context](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context.md): Extend Cortex XSOAR 6.14 context with integration and command output data. - [Extend Context in a Playbook Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-in-a-playbook-task.md): Extend context within a Cortex XSOAR 6.14 playbook task. - [Extend Context using the Command Line](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/extend-context-using-the-command-line.md): Extend Cortex XSOAR 6.14 context using command-line commands. - [Use DT syntax to get select keys from a list of dictionaries](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/extend-context/use-dt-syntax-to-get-select-keys-from-a-list-of-dictionaries.md): Use DT syntax in Cortex XSOAR 6.14 to select dictionary list keys. - [Filters and Transformers](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers.md): Use Cortex XSOAR 6.14 filters and transformers to manipulate playbook data. - [Create Filters and Transformers in a Playbook](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook.md): Create filters and transformers for Cortex XSOAR 6.14 playbook tasks. - [Create a Filter Example](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-example.md): Create a Cortex XSOAR 6.14 playbook filter with this example. - [Create a Filter (Advanced) Example](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/create-filters-and-transformers-in-a-playbook/create-a-filter-advanced-example.md): Create advanced Cortex XSOAR 6.14 playbook filters with this example. - [Filter Operators](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators.md): Reference filter operators for Cortex XSOAR 6.14 playbook data processing. - [Built-in Filters](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/built-in-filters.md): Use built-in filters to transform Cortex XSOAR 6.14 playbook data. - [Transformers Operators](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/transformers-operators.md): Reference transformer operators for Cortex XSOAR 6.14 playbook data. - [Create Custom Filter and Transformer Operators](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/filters-and-transformers/filter-operators/create-custom-filter-and-transformer-operators.md): Create custom filters and transformers for Cortex XSOAR 6.14 playbooks. - [Automations](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations.md): Create and manage Cortex XSOAR 6.14 automations for playbook workflows. - [Special Automation Tags](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/special-automation-tags.md): Reference special automation tags in Cortex XSOAR 6.14. - [Common Scripts to use in Automations](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/automations/common-scripts-to-use-in-automations.md): Use common Cortex XSOAR 6.14 scripts in automation workflows. - [Configure a Sub-playbook Loop](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/configure-a-sub-playbook-loop.md): Configure a Cortex XSOAR 6.14 sub-playbook to run in a loop. - [Playbook Polling](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-polling.md): Use the Cortex XSOAR 6.14 Generic Polling playbook to check remote process status. - [Create Incident Fields in a Playbook](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/create-incident-fields-in-a-playbook.md): Use the Cortex XSOAR 6.14 setIncident automation to update system incident fields. - [Playbook Testing](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing.md): Test Cortex XSOAR 6.14 playbooks with ingested incidents. - [Debug a Playbook](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debug-a-playbook.md): Debug Cortex XSOAR 6.14 playbooks to inspect tasks and execution flow. - [Debugger Troubleshooting](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/playbook-testing/debugger-troubleshooting.md): Troubleshoot the Cortex XSOAR 6.14 playbook debugger. - [Best Practices](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks/best-practices.md): Follow best practices for developing and managing Cortex XSOAR 6.14 playbooks. - [Jobs](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs.md): Schedule Cortex XSOAR 6.14 playbooks with time-triggered and feed-triggered jobs. - [Create a Time Triggered Job](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-time-triggered-job.md): Create a time-triggered Cortex XSOAR 6.14 job to run a playbook. - [Create a Job Triggered by a Delta in Feed](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/create-a-job-triggered-by-a-delta-in-feed.md): Create a Cortex XSOAR 6.14 job triggered by feed changes. - [Time Triggered Job Parameters](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/time-triggered-job-parameters.md): Describe parameters for creating a time-triggered job in Cortex XSOAR 6.14. - [Process Indicators Using a Job Triggered By Delta](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/process-indicators-using-a-job-triggered-by-delta.md): Process indicators with a feed-triggered Cortex XSOAR 6.14 job. - [Add Indicators to SIEM Using a Time Triggered Job](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs/add-indicators-to-siem-using-a-time-triggered-job.md): Send indicators to a SIEM with a time-triggered Cortex XSOAR 6.14 job. - [Work with SLAs](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas.md): Create and manage Cortex XSOAR 6.14 SLAs, timers, triggers, scripts, and risk thresholds. - [SLA Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/sla-overview.md): Understand SLA fields, timers, and actions in Cortex XSOAR 6.14. - [Create an SLA Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-field.md): Create SLA and timer fields in Cortex XSOAR 6.14. - [Manage SLA and Timer Fields in an Incident](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/manage-sla-and-timer-fields-in-an-incident.md): Manage incident SLA and timer fields in Cortex XSOAR 6.14. - [Create an SLA Trigger](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/create-an-sla-trigger.md): Create SLA triggers for Cortex XSOAR 6.14 playbook tasks. - [Customize SLA Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/customize-sla-scripts.md): Customize SLA scripts for Cortex XSOAR 6.14. - [Search Incidents using SLA and Timer Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/search-incidents-using-sla-and-timer-fields.md): Search Cortex XSOAR 6.14 incidents by SLA and timer fields. - [Configure the Global Risk Threshold](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas/configure-the-global-risk-threshold.md): Configure the global SLA risk threshold in Cortex XSOAR 6.14. - [Machine Learning](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning.md): Use Cortex XSOAR 6.14 machine learning models for phishing classification and automation. - [Machine Learning Capabilities](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-capabilities.md): Explore Cortex XSOAR 6.14 machine learning and phishing classifier capabilities. - [Machine Learning Models](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/machine-learning-models.md): Use Cortex XSOAR 6.14 machine learning models for incident analysis. - [Use the Phishing Classifier in Production](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/use-the-phishing-classifier-in-production.md): Use the Cortex XSOAR 6.14 phishing classifier in production. - [Create a Machine Learning Model](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/create-a-machine-learning-model.md): Create a Cortex XSOAR 6.14 machine learning model for phishing classification. - [Phishing Classifier Demo](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/phishing-classifier-demo.md): Try the Cortex XSOAR 6.14 phishing classifier demonstration. - [Train a Phishing Classifier on Non-English Languages](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/train-a-phishing-classifier-on-non-english-languages.md): Train a Cortex XSOAR 6.14 phishing classifier for non-English language emails. - [Additional Machine Learning Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning/additional-machine-learning-scripts.md): Reference additional Cortex XSOAR 6.14 machine learning scripts. - [Lists](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists.md): Create and manage Cortex XSOAR 6.14 lists for playbooks and automations. - [Work With Lists](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists.md): Manage lists in Cortex XSOAR 6.14 that automations and playbooks can access. - [Work with JSON Lists](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/work-with-lists/work-with-json-lists.md): Extract, filter, and transform JSON list data in Cortex XSOAR 6.14 playbooks. - [Create a List](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/create-a-list.md): Create Cortex XSOAR 6.14 lists that scripts can parse and modify. - [Set the List Separator Character](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/set-the-list-separator-character.md): Set the list separator character in Cortex XSOAR 6.14. The default is a comma. - [Transform a List into an Array](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists/transform-a-list-into-an-array.md): Transform a list into an array for playbook tasks and instance mapping in Cortex XSOAR 6.14. - [Indicators](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators.md): Manage Cortex XSOAR 6.14 threat indicators, including types, fields, extraction, enrichment, expiration, and feeds. - [Indicator Concepts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-concepts.md): Learn Cortex XSOAR 6.14 threat intelligence concepts, including fetching, configuring, enriching, and exporting indicators. - [Indicator Verdict](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-verdict.md): Understand how Cortex XSOAR 6.14 assigns and uses indicator verdicts from the most reliable reputation source. - [Indicator Ingestion](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-ingestion.md): Understand how Cortex XSOAR 6.14 detects, ingests, and processes threat indicators from supported sources. - [Indicator Customization](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization.md): Customize Cortex XSOAR 6.14 indicator types, fields, scripts, profiles, and layouts for threat intelligence workflows. - [Indicator Types](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types.md): Configure Cortex XSOAR 6.14 indicator types, associated fields, profiles, and scripts for threat intelligence data. - [File Indicators](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators.md): Manage Cortex XSOAR 6.14 file indicators and their associated hash values for threat intelligence workflows. - [File Indicator Merging Strategy](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/file-indicators/file-indicator-merging-strategy.md): Understand how Cortex XSOAR 6.14 merges file indicators using their hash values. - [Create an Indicator Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/create-an-indicator-type.md): Create a custom Cortex XSOAR 6.14 indicator type for structured threat intelligence data. - [Indicator Type Profile](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/indicator-type-profile.md): Configure Cortex XSOAR 6.14 indicator type profiles to control indicator fields and behavior. - [Map Custom Indicator Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/map-custom-indicator-fields.md): Map custom fields to Cortex XSOAR 6.14 indicator data for consistent threat intelligence management. - [Formatting Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/formatting-scripts.md): Configure Cortex XSOAR 6.14 formatting scripts to normalize indicator values and output. - [Enhancement Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/enhancement-scripts.md): Configure Cortex XSOAR 6.14 enhancement scripts to enrich indicators on demand. - [Reputation Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-scripts.md): Configure Cortex XSOAR 6.14 reputation scripts that calculate and update indicator verdicts. - [Reputation Commands](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-types/reputation-commands.md): Configure Cortex XSOAR 6.14 reputation commands that calculate and update indicator verdicts. - [Indicator Fields](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields.md): Create and configure Cortex XSOAR 6.14 indicator fields for structured threat intelligence data. - [Create a Custom Indicator Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field.md): Create a custom Cortex XSOAR 6.14 indicator field for tailored threat intelligence data. - [Configure the HTML Field](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/create-a-custom-indicator-field/configure-the-html-field.md): Configure HTML indicator fields in Cortex XSOAR 6.14 to display rich threat intelligence content. - [Indicator Field Trigger Scripts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-fields/indicator-field-trigger-scripts.md): Run Cortex XSOAR 6.14 scripts automatically when indicator field values change. - [Indicator Layouts](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts.md): Customize Cortex XSOAR 6.14 layouts for indicator types and threat intelligence investigations. - [Customize an Indicator Type Layout](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/customize-an-indicator-type-layout.md): Customize a Cortex XSOAR 6.14 layout for an indicator type and its threat intelligence data. - [Add a Script in the Indicator Layout](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-customization/indicator-layouts/add-a-script-in-the-indicator-layout.md): Add dynamic script output to a Cortex XSOAR 6.14 indicator layout. - [Indicator Extraction](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction.md): Configure Cortex XSOAR 6.14 indicator extraction and enrichment from incident fields, playbook tasks, and CLI commands. - [Indicator Extraction Modes](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/indicator-extraction-modes.md): Understand Cortex XSOAR 6.14 indicator extraction modes and their behavior for incident data. - [Create Indicator Extraction Rules for an Incident Type](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extraction-rules-for-an-incident-type.md): Configure Cortex XSOAR 6.14 indicator extraction rules for incident types and fields. - [Run Indicator Extraction in the CLI](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/run-indicator-extraction-in-the-cli.md): Extract and enrich Cortex XSOAR 6.14 indicators from the command-line interface. - [Create Indicator Extract Rules for a Playbook Task](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/create-indicator-extract-rules-for-a-playbook-task.md): Configure Cortex XSOAR 6.14 indicator extraction rules for playbook tasks. - [Disable Indicator Extraction for Automations or Integrations](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-extraction/disable-indicator-extraction-for-automations-or-integrations.md): Disable Cortex XSOAR 6.14 indicator extraction for selected automations or integrations. - [Indicator Expiration](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/indicator-expiration.md): Configure Cortex XSOAR 6.14 indicator expiration statuses, default methods, and retention periods. - [Feed Integrations](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations.md): Use Cortex XSOAR 6.14 feed integrations to fetch and process threat indicators from intelligence sources. - [Set the Source Reliability of Enrichment Integrations](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators/feed-integrations/set-the-source-reliability-of-enrichment-integrations.md): Set Cortex XSOAR 6.14 source reliability for enrichment integrations and indicator reputation data. - [Dashboards](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards.md): Create, customize, share, and manage Cortex XSOAR 6.14 dashboards and widgets for security operations data. - [Dashboard Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/dashboard-overview.md): Explore Cortex XSOAR 6.14 dashboards, customizable widgets, filters, sharing, imports, exports, and dashboard management. - [Create a Dashboard](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/create-a-dashboard.md): Create and customize a Cortex XSOAR 6.14 dashboard with widgets, data views, and security operations insights. - [Add a Widget to a Dashboard](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/add-a-widget-to-a-dashboard.md): Add and configure widgets on Cortex XSOAR 6.14 dashboards, including widget parameters and date ranges. - [Share a Dashboard](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/share-a-dashboard.md): Share Cortex XSOAR 6.14 dashboards with users by role and manage permissions for shared dashboard access. - [Edit a Dashboard](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards/edit-a-dashboard.md): Edit Cortex XSOAR 6.14 dashboards by managing widgets, date ranges, layout, size, and position. - [Reports](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports.md): Create, customize, schedule, and troubleshoot Cortex XSOAR 6.14 reports for security operations data. - [Reports Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/reports-overview.md): Explore Cortex XSOAR 6.14 reporting features, including report creation, customization, scheduling, formats, and branding. - [Create a Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-a-report.md): Create and customize Cortex XSOAR 6.14 reports with widgets, schedules, recipients, and PDF, CSV, or Word output. - [Schedule a report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/schedule-a-report.md): Schedule Cortex XSOAR 6.14 reports with email recipients, role restrictions, start dates, and Cron expressions. - [Customize the Email When Sending a Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/customize-the-email-when-sending-a-report.md): Customize Cortex XSOAR 6.14 report email subjects, message bodies, and HTML content for scheduled delivery. - [Create an Incident Summary Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/create-an-incident-summary-report.md): Create Cortex XSOAR 6.14 incident summary reports from incident pages and save report templates. - [Select and Customize Sections to Export to a Summary Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/select-and-customize-sections-to-export-to-a-summary-report.md): Select and customize Cortex XSOAR 6.14 summary report sections, then save the report as a reusable template. - [Add a Widget to a Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/add-a-widget-to-a-report.md): Add and configure widgets in Cortex XSOAR 6.14 reports to visualize security operations data. - [Edit a report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/edit-a-report.md): Edit Cortex XSOAR 6.14 report widgets, layout, and output type for custom reports. - [Change the Report Logo](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/change-the-report-logo.md): Add and customize a company logo in Cortex XSOAR 6.14 reports using server configuration settings. - [Configure the Time Zone and Format in a Report](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/configure-the-time-zone-and-format-in-a-report.md): Configure Cortex XSOAR 6.14 report time zones and date formats, and resolve related display issues. - [Troubleshoot Reports](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports/troubleshoot-reports.md): Troubleshoot Cortex XSOAR 6.14 reports by downloading and reviewing report JSON output. - [Widgets](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets.md): Create, customize, and manage Cortex XSOAR 6.14 widgets for dashboards, reports, and security operations data. - [Widgets Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/widgets-overview.md): Explore Cortex XSOAR 6.14 widgets and learn how to create, configure, and use them in dashboards and reports. - [Create a Widget using the Widget Builder](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-widget-using-the-widget-builder.md): Create Cortex XSOAR 6.14 widgets with the Widget Builder for dashboards and reports. - [Create a Custom Widget Using a JSON File](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-a-json-file.md): Create custom Cortex XSOAR 6.14 widgets from JSON files for dashboards and reports. - [Create a Custom Widget Using an Automation Script](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-custom-widget-using-an-automation-script.md): Create custom Cortex XSOAR 6.14 widgets with automation scripts for dashboards and reports. - [Edit a Widget](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/edit-a-widget.md): Edit Cortex XSOAR 6.14 widgets in the Widgets Library, dashboards, and reports. - [Create a Used Percentage Widget for a Disk Partition](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/create-a-used-percentage-widget-for-a-disk-partition.md): Create a Cortex XSOAR 6.14 disk partition usage widget with server configuration and a dashboard. - [Saved By Dbot (ROI) Widget](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets/saved-by-dbot-roi-widget.md): Configure the Cortex XSOAR 6.14 Saved by Dbot widget to calculate security operations return on investment. - [Manage Data](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data.md): Manage Cortex XSOAR 6.14 data with reindexing, archiving, migration, storage, and restoration procedures. - [Reindex the Entire Database](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-entire-database.md): Reindex the entire Cortex XSOAR 6.14 database to rebuild searchable data and indexes. - [Reindex a Specific Index Database](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-a-specific-index-database.md): Reindex specific Cortex XSOAR 6.14 index databases, including multiple selected indexes. - [Reindex the Audit Log](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/reindex-the-audit-log.md): Reindex the Cortex XSOAR 6.14 audit log to restore searchable historical audit trail data. - [Free up Disk Space with Data Archiving](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/free-up-disk-space-with-data-archiving.md): Free Cortex XSOAR 6.14 disk space by archiving unused incident, entry, and indicator data. - [Archive Artifacts and Attachments](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/archive-artifacts-and-attachments.md): Archive Cortex XSOAR 6.14 artifacts and attachment folders to reduce storage use. - [Store Incident/Artifact Files in the Cloud](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/store-incidentartifact-files-in-the-cloud.md): Store Cortex XSOAR 6.14 incident attachments, artifacts, and War Room files in cloud storage. - [Migrate Data to Another Server](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server.md): Migrate Cortex XSOAR 6.14 data, files, and directories to another server. - [Migrate Data to Another Server for Multi-Tenant](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/migrate-data-to-another-server-for-multi-tenant.md): Migrate Cortex XSOAR 6.14 data to another server in a multi-tenant environment. - [Move Data Folders to Another Location on the Server](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/move-data-folders-to-another-location-on-the-server.md): Move Cortex XSOAR 6.14 data folders to a different server location for storage management. - [Restore an Archived Folder](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data/restore-an-archived-folder.md): Restore an archived Cortex XSOAR 6.14 data folder when access to archived data is required. - [Logs](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs.md): Configure Cortex XSOAR 6.14 server logs, access logs, audit trails, and diagnostic log bundles. - [Logs Overview](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/logs-overview.md): Understand Cortex XSOAR 6.14 logs and use log data for system monitoring and troubleshooting. - [Configure the Server Log](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-server-log.md): Configure Cortex XSOAR 6.14 server log levels, file sizes, backups, and retention periods. - [Configure the Access Log for HTTPS Requests](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/configure-the-access-log-for-https-requests.md): Configure Cortex XSOAR 6.14 access logs to view HTTP and HTTPS requests. - [Create a Log Bundle](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/create-a-log-bundle.md): Create a Cortex XSOAR 6.14 diagnostic log bundle for troubleshooting and support investigations. - [Audit Trail](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/audit-trail.md): View, export, extract, and purge Cortex XSOAR 6.14 audit trail records for administrative user actions. - [Send the Audit Trail to an External Log Service](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs/send-the-audit-trail-to-an-external-log-service.md): Send Cortex XSOAR 6.14 audit trail records to an external log service using server configurations. - [System Settings](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings.md): Configure Cortex XSOAR 6.14 branding, login messages, system emails, and notification delivery settings. - [Customize the Logo](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-logo.md): Customize full-size and minimized logos in Cortex XSOAR 6.14. - [Customize the Login Message](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-the-login-message.md): Customize the login page message displayed to Cortex XSOAR 6.14 users before authentication. - [Customize System Emails](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/customize-system-emails.md): Customize Cortex XSOAR 6.14 system email subjects and message bodies in HTML or plain-text formats. - [Configure System Notifications](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings/configure-system-notifications.md): Configure Cortex XSOAR 6.14 email notifications and mail sender settings with server configurations. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.