You can use this SOAR action to get recommendations related to the policy that is associated with the alert.

  • This SOAR action can be run from an alert, and can be performed on one alert at a time.
  • The Get Policy Recommendations action is available in the related actions in the related list of alerts.
  • The fetched recommendations are shown on the Alerts Form view.
  • On successful execution of the action, the Alert Recommendations related list in the alert is populated with the record.
  • Requests using the same Recommendation ID will get updated on multiple executions of the action.