Skip to content

Add custom instructions for an Elevate agent

Custom instructions give the Elevate agent environment-specific context it cannot infer from telemetry alone. This article explains how to provide contextual instructions at the workspace or community level so the agent produces more relevant verdicts.

Prerequisites

Add contextual instructions

Contextual instructions tell the agent what is normal or expected in your environment. The agent takes them into account when analyzing alerts and producing its verdict.

To add instructions for a specific community:

  1. Navigate to Settings > AI agents.
  2. Select the community where you want the instructions to apply.
  3. Select Alert/Case Investigation agent.
  4. Select the Instructions tab.
  5. Enter your custom instructions.
  6. Select Save.

Applying instructions to all communities

To apply instructions across all communities, select your workspace instead of a specific community in step 2.

Instructions tab in the AI agent settings panel with a text input field

To customize how the agent reasons for a specific detection rule rather than for your environment as a whole, edit the rule's runbook instead. See Customize a detection rule's runbook.