XDR Email notification on new Incident

[Rene Mueller]

Hello,

is it possible to setup an email notification whenever XDR creates a new Incident? I don't see anything like that in the notification section. Maybe its possible when setting up a workflow in XDR, but this sound like a workaround for me.

Does anyone work with XDR and knows how to get Email notifications?

[Ken Stieers · Accepted solution]

Yes... you have to import or build an automation to do it.
There is one already built for you in the Exchange.

In XDR, click on Automate/Exchange.
Under Integration, select Cisco XDR, and it will filter it down. There's a Cisco Managed workflow titled "Cisco XDR - Send Email Notification for New Incident"