Use Markdown in Cortex XCOR

Palo Alto Networks Cortex XCOR supports Markdown in several places where you write or exchange formatted text. The supported syntax and editing tools depend on the resource or resource component.

Markdown support by resource and component

The following table summarizes how each resource or component uses Markdown:

Resource or component	Markdown use	Additional features
Dashboard Markdown panels	Enter and preview Markdown in a text field.	Dashboard links and dashboard variables.
Metric comments	Enter and preview Markdown in the comments drawer.	User mentions and links to metric charts in Metrics Explorer.
Monitor annotations	Format annotation text in a monitor definition.	Alert values, labels, instance base URL, and notification-time alert start and end values in templates.
SLO annotations	Format annotation text when creating or editing an SLO.	Notification signal labels in templates.
Resolution notes	Enter and preview Markdown in the resolution note field.	Formatting toolbar.
Notebooks	Copy notebook content as Markdown or convert supported Markdown blocks to rich text.	Tables, diagrams, visualization panels, entity links, and other notebook content.

Markdown panels, comments, and resolution notes support the syntax in the following section. The annotation documentation covers a focused set of inline formatting. Notebooks use a rich text editor and convert content to and from Markdown.

Write Markdown

Use the following syntax in Markdown panels, comments, and resolution notes:

# Heading

Write **bold text**, *italic text*, ~~strikethrough text~~, and `inline code`.

Create a [named link](https://docs.example.com).

- Unordered list item
- Another list item

1. Ordered list item
1. Another list item

- [x] Completed task
- [ ] Incomplete task

> Add a block quote.

```text
Add a fenced code block.
```

To create a table, use pipe characters (|) to separate columns. Use a row of hyphens to separate the column headings from the table rows:

| First heading | Second heading |
|---------------|----------------|
| First value   | Second value   |
| Third value   | Fourth value   |

Raw HTML behavior depends on where you use it. Unsupported elements or attributes might be removed or rendered as literal text. Use Markdown syntax instead of raw HTML.

Format annotations

Annotations support the following Markdown syntax:

Bold text: **text**
Inline code: `code`
Named links: [label](https://example.com)
Plain HTTP and HTTPS URLs

Keep the annotation-specific configuration, including template variables, in the monitor or SLO definition. Monitor templates can reference alert values, labels, external labels, and the instance base URL. Alert start and end values expand when notifications are rendered.

Use Markdown with notebooks

Notebooks use a rich text editor instead of a Markdown source editor. Copy a notebook as Markdown to use its content outside Cortex XCOR. To convert pasted Markdown to rich text, include a supported block element, such as a heading, list, block quote, fenced code block, table, horizontal rule, or details block. Content that contains only inline Markdown might paste as literal text. The notebook Markdown format includes standard text formatting, tables, task lists, Mermaid diagrams, and Cortex XCOR visualization panels. Some rich notebook content changes when copied to Markdown and pasted again. For the supported content and conversion behavior, see Use Markdown with notebooks.

Cortex XCOR

Palo Alto Networks Telemetry Pipeline

More information

Markdown support by resource and component

Write Markdown

Format annotations

Use Markdown with notebooks

​Markdown support by resource and component

​Write Markdown

​Format annotations

​Use Markdown with notebooks

Markdown support by resource and component

Write Markdown

Format annotations

Use Markdown with notebooks