You can use this SOAR action to get recommendations related to the policy that is associated with the alert.
- This SOAR action can be run from an alert, and can be performed on one alert at a time.
- The Get Policy Recommendations action is available in the related actions in the related list of alerts.
- The fetched recommendations are shown on the Alerts Form view.
- On successful execution of the action, the Alert Recommendations related list in the alert is populated with the record.
- Requests using the same
Recommendation ID
will get updated on multiple executions of the action.