correlations_get
Retrieve correlation rules from Cortex XSIAM with optional filters for fields like name, severity, and status. Use extended view for full rule details.
Instructions
Get Correlation Rules
Return a list of correlation rules. You can return all correlation rules or filter results. You can also return extended results with all details included.
The response is concatenated using AND condition (OR is not supported).
The maximum result set size is >100.
Offset is the zero-based number of incidents from the start of the result set.
You must have Instance Administrator permissions to run this endpoint.
[POST /public_api/v1/correlations/get] · Correlation Rules
Example request body:
{
"request_data": {
"extended_view": false
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request_data | Yes |