When Cortex XSIAM cases, issues, and logs are forwarded to email or a third-party system, notifications are sent in a specific format.
Issues can be forwarded to email, syslog servers, and Slack in the alert format, if you prefer. The alert format can be selected when you configure your forwarding notification.