> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/readme.md). # Navigate the Cortex XSOAR 6.15 Administrator Guide Start here for a visual overview of the main Cortex XSOAR 6.15 documentation areas. Use this page to jump into the right docs area fast. ### Learn about Cortex XSOAR

Topic	Link
Get Started in Cortex XSOAR Explore core concepts, licenses, and essential product features.	Get Started in Cortex XSOAR
Product Support Lifecycle Learn about updates and EOL dates.	Product Support Lifecycle

### Onboard Cortex XSOAR

Topic	Link
Deployment Checklist - Best Practices Overview of the deployment process, including best practices for Cortex XSOAR 6.15 installation and maintenance.	Deployment Checklist - Best Practices
Single Server Deployment Install, configure, upgrade, and maintain a Cortex XSOAR 6.15 single-server deployment.	Single Server Deployment
Elasticsearch Deploy and manage Cortex XSOAR 6.15 with Elasticsearch, including setup, security, migration, backups, and troubleshooting.	Elasticsearch
Docker Install, configure, secure, and troubleshoot Docker for Cortex XSOAR 6.15.	Docker
Podman Install, configure, migrate to, and troubleshoot Podman for Cortex XSOAR 6.14 on RHEL 8 and later.	Podman
Proxy Configure proxy, proxy bypass, and NGINX reverse proxy settings for Cortex XSOAR 6.15.	Proxy
High Availability Configure Cortex XSOAR 6.15 high availability with Elasticsearch, including sizing, migration, app servers, engines, and certificates.	High Availability
Disaster Recovery and Live Backup Configure Cortex XSOAR 6.15 disaster recovery and live backup, including failover, backups, restores, and troubleshooting.	Disaster Recovery and Live Backup
Users and Roles Manage Cortex XSOAR 6.15 users, roles, permissions, settings, shifts, passwords, and authentication.	Users and Roles
Marketplace Browse Cortex XSOAR 6.15 Marketplace content packs, manage installations, and contribute content.	Marketplace
Remote Repositories in Cortex XSOAR Configure Cortex XSOAR 6.15 remote repositories for content development, synchronization, and deployment.	Remote Repositories in Cortex XSOAR
Engines Install, manage, configure, and troubleshoot Cortex XSOAR 6.15 engines.	Engines

### Customize Cortex XSOAR

Topic	Link
Incidents Configure Cortex XSOAR 6.15 incident types, workflows, fields, layouts, and access controls.	Incidents
Playbooks Build and manage Cortex XSOAR 6.15 playbooks for security orchestration and response.	Playbooks
Jobs Schedule Cortex XSOAR 6.15 playbooks with time-triggered and feed-triggered jobs.	Jobs
Work with SLAs Create and manage Cortex XSOAR 6.15 SLAs, timers, triggers, scripts, and risk thresholds.	Work with SLAs
Machine Learning Use Cortex XSOAR 6.15 machine learning models for phishing classification and automation.	Machine Learning
Lists Create and manage Cortex XSOAR 6.15 lists for playbooks and automations.	Lists
Indicators Manage Cortex XSOAR 6.15 threat indicators, including types, fields, extraction, enrichment, expiration, and feeds.	Indicators
Dashboards Create, customize, share, and manage Cortex XSOAR 6.15 dashboards and widgets for security operations data.	Dashboards
Reports Create, customize, schedule, and troubleshoot Cortex XSOAR 6.15 reports for security operations data.	Reports
Widgets Create, customize, and manage Cortex XSOAR 6.15 widgets for dashboards, reports, and security operations data.	Widgets
Manage Data Manage Cortex XSOAR 6.15 data with reindexing, archiving, migration, storage, and restoration procedures.	Manage Data
Logs Configure Cortex XSOAR 6.15 server logs, access logs, audit trails, and diagnostic log bundles.	Logs
System Settings Configure Cortex XSOAR 6.15 branding, login messages, system emails, and notification delivery settings.	System Settings

### Investigate and Respond to Threats

Topic	Link
Incident Management Open, investigate, manage, and resolve security incidents in Cortex XSOAR 6.15.	Incident Management
Indicator Management Create, search, edit, export, and manage threat indicators in Cortex XSOAR 6.15.	Indicator Management

### Troubleshoot and Reference

Topic	Link
Reference Docs Access configuration details, diagnostics, and technical reference material.	Reference Docs
Server Configurations Reference Cortex XSOAR 6.15 server configurations for customization, administration, and troubleshooting.	Server Configurations

### Threat Intel Management

Topic	Link
Threat Intel Management Manage indicators, threat intelligence feeds, and threat intel reports in Cortex XSOAR 6.15.	Navigate the Threat Intel Management Guide

### Mult-Tenant

Topic	Link
Multi-Tenant Configure and manage Cortex XSOAR multi-tenant deployments.	What is Cortex XSOAR multi-tenant?

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.15/learn-about-cortex-xsoar/readme.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `build a script that syncs our docs to a CMS` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.