> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/readme.md).

# Navigate the Cortex XSOAR 6.14 Administrator Guide

Start here for a visual overview of the main Cortex XSOAR 6.14 documentation areas.

Use this page to jump into the right docs area fast.

### Learn about Cortex XSOAR

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-rocket">:rocket:</i><strong>Get started in Cortex XSOAR</strong><br>Learn core concepts, licenses, API keys, search, and the command-line interface.</td><td><a href="/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar.md">Get Started in Cortex XSOAR</a></td></tr><tr><td><i class="fa-clock">:clock:</i><strong>Product Support Lifecycle</strong><br>Review release versioning, supported releases, and end-of-life dates.</td><td><a href="/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/get-started-in-cortex-xsoar/product-support-lifecycle.md">Product Support Lifecycle</a></td></tr></tbody></table>

### Onboard Cortex XSOAR

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-list-check">:list-check:</i><strong>Deployment checklist</strong><br>Review deployment best practices.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/deployment-checklist-best-practices.md">Deployment Checklist - Best Practices</a></td></tr><tr><td><i class="fa-server">:server:</i><strong>Single-server deployment</strong><br>Install, configure, upgrade, and maintain a single-server deployment.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/single-server-deployment.md">Single Server Deployment</a></td></tr><tr><td><i class="fa-database">:database:</i><strong>Elasticsearch</strong><br>Deploy and manage Cortex XSOAR with Elasticsearch.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/elasticsearch.md">Elasticsearch</a></td></tr><tr><td><i class="fa-box">:box:</i><strong>Docker</strong><br>Install, configure, secure, and troubleshoot Docker.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/docker.md">Docker</a></td></tr><tr><td><i class="fa-cube">:cube:</i><strong>Podman</strong><br>Install, configure, migrate to, and troubleshoot Podman.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/podman.md">Podman</a></td></tr><tr><td><i class="fa-shield-halved">:shield-halved:</i><strong>Proxy</strong><br>Configure proxy and reverse proxy settings.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/proxy.md">Proxy</a></td></tr><tr><td><i class="fa-server">:server:</i><strong>High availability</strong><br>Configure high availability with Elasticsearch.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/high-availability.md">High Availability</a></td></tr><tr><td><i class="fa-life-ring">:life-ring:</i><strong>Disaster recovery and live backup</strong><br>Configure failover, backups, restores, and troubleshooting.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/disaster-recovery-and-live-backup.md">Disaster Recovery and Live Backup</a></td></tr><tr><td><i class="fa-users">:users:</i><strong>Users and roles</strong><br>Manage users, roles, permissions, and authentication.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/users-and-roles.md">Users and Roles</a></td></tr><tr><td><i class="fa-store">:store:</i><strong>Marketplace</strong><br>Browse, manage, and contribute content packs.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/marketplace.md">Marketplace</a></td></tr><tr><td><i class="fa-code-branch">:code-branch:</i><strong>Remote repositories</strong><br>Configure repositories for content development and deployment.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/remote-repositories-in-cortex-xsoar.md">Remote Repositories in Cortex XSOAR</a></td></tr><tr><td><i class="fa-gears">:gears:</i><strong>Engines</strong><br>Install, manage, configure, and troubleshoot engines.</td><td><a href="/xsoar-6-administrator-guide/6.14/onboard-cortex-xsoar/engines.md">Engines</a></td></tr></tbody></table>

### Customize Cortex XSOAR

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-triangle-exclamation">:triangle-exclamation:</i><strong>Incidents</strong><br>Configure incident types, workflows, fields, layouts, and access controls.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/incidents.md">Incidents</a></td></tr><tr><td><i class="fa-diagram-project">:diagram-project:</i><strong>Playbooks</strong><br>Build and manage playbooks for security orchestration and response.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/playbooks.md">Playbooks</a></td></tr><tr><td><i class="fa-calendar">:calendar:</i><strong>Jobs</strong><br>Schedule playbooks with time-triggered and feed-triggered jobs.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/jobs.md">Jobs</a></td></tr><tr><td><i class="fa-stopwatch">:stopwatch:</i><strong>Work with SLAs</strong><br>Create and manage service level agreements, timers, and triggers.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/work-with-slas.md">Work with SLAs</a></td></tr><tr><td><i class="fa-brain">:brain:</i><strong>Machine learning</strong><br>Use machine learning models for phishing classification and automation.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/machine-learning.md">Machine Learning</a></td></tr><tr><td><i class="fa-list">:list:</i><strong>Lists</strong><br>Create and manage lists for playbooks and automations.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/lists.md">Lists</a></td></tr><tr><td><i class="fa-tags">:tags:</i><strong>Indicators</strong><br>Manage threat indicators, including types, fields, enrichment, and feeds.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/indicators.md">Indicators</a></td></tr><tr><td><i class="fa-chart-line">:chart-line:</i><strong>Dashboards</strong><br>Create, customize, share, and manage dashboards and widgets.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/dashboards.md">Dashboards</a></td></tr><tr><td><i class="fa-file-lines">:file-lines:</i><strong>Reports</strong><br>Create, customize, schedule, and troubleshoot reports.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/reports.md">Reports</a></td></tr><tr><td><i class="fa-chart-pie">:chart-pie:</i><strong>Widgets</strong><br>Create, customize, and manage widgets for dashboards and reports.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/widgets.md">Widgets</a></td></tr><tr><td><i class="fa-database">:database:</i><strong>Manage data</strong><br>Manage reindexing, archiving, migration, storage, and restoration.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/manage-data.md">Manage Data</a></td></tr><tr><td><i class="fa-file-waveform">:file-waveform:</i><strong>Logs</strong><br>Configure server logs, audit trails, and diagnostic log bundles.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/logs.md">Logs</a></td></tr><tr><td><i class="fa-sliders">:sliders:</i><strong>System settings</strong><br>Configure branding, login messages, emails, and notifications.</td><td><a href="/xsoar-6-administrator-guide/6.14/customize-cortex-xsoar/customize-and-configure-cortex-xsoar/system-settings.md">System Settings</a></td></tr></tbody></table>

### Investigate and respond to threats

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-magnifying-glass">:magnifying-glass:</i><strong>Incident management</strong><br>Open, investigate, manage, and resolve security incidents.</td><td><a href="/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/incident-management.md">Incident Management</a></td></tr><tr><td><i class="fa-tags">:tags:</i><strong>Indicator management</strong><br>Create, search, edit, export, and manage threat indicators.</td><td><a href="/xsoar-6-administrator-guide/6.14/investigate-and-respond-to-threats/day-to-day-tasks-in-cortex-xsoar/indicator-management.md">Indicator Management</a></td></tr></tbody></table>

### Reference docs

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-book">:book:</i><strong>Reference</strong><br>Find configuration, diagnostics, security, and operations reference information.</td><td><a href="/xsoar-6-administrator-guide/6.14/reference-docs/reference.md">Reference</a></td></tr><tr><td><i class="fa-gears">:gears:</i><strong>Server configurations</strong><br>Reference server configurations for customization, administration, and troubleshooting.</td><td><a href="/xsoar-6-administrator-guide/6.14/reference-docs/reference/server-configurations.md">Server Configurations</a></td></tr></tbody></table>

### Threat Intel Management

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-shield">:shield:</i><strong>Threat Intel Management</strong><br>Manage threat intelligence, indicators, and related workflows.</td><td><a href="/cortex-xsoar-6-threat-intel-management-guides/6.14/learn-about-threat-intel-management/readme.md">Navigate the Threat Intel Management Guide</a></td></tr></tbody></table>

### Multi-Tenant

<table data-view="cards"><thead><tr><th>Topic</th><th data-card-target data-type="content-ref">Learn more</th></tr></thead><tbody><tr><td><i class="fa-building">:building:</i><strong>Multi-Tenant</strong><br>Plan, install, configure, and manage multi-tenant deployments.</td><td><a href="/cortex-xsoar-6-multi-tenant-guides/6.14/learn-about-mult-tenant/readme.md">Navigate the Multi-Tenant Guide</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.14/learn-about-cortex-xsoar/readme.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.