{"id":76903,"date":"2026-06-17T12:31:22","date_gmt":"2026-06-17T12:31:22","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/76903\/"},"modified":"2026-06-17T12:31:22","modified_gmt":"2026-06-17T12:31:22","slug":"ai-powered-workflow-run-summaries-in-cisco-xdr","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/76903\/","title":{"rendered":"AI-Powered Workflow Run Summaries in Cisco XDR"},"content":{"rendered":"<p>If\u00a0you\u2019ve\u00a0ever troubleshot a complex workflow run, you know the drill: click into actions, expand inputs and outputs, scan logs, backtrack, repeat. When something goes wrong, the signal is there, but\u00a0it\u2019s\u00a0buried under a lot of execution detail.<\/p>\n<p>Today,\u00a0we\u2019re\u00a0changing that.<\/p>\n<p>We\u2019ve\u00a0just released\u00a0<a href=\"https:\/\/docs.xdr.security.cisco.com\/Content\/Automate\/runs-view.htm\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Workflow Run Summaries<\/a>\u00a0in Cisco XDR Automate: an on-demand, AI-generated summary that explains\u00a0what happened\u00a0during a workflow execution,\u00a0where things went wrong, and\u00a0why that matters,\u00a0without forcing you to manually inspect every step. It even provides you with potential remediation steps to fix your mistakes.<\/p>\n<p>What the feature does<\/p>\n<p>With a single click on\u00a0\u201cGenerate Run Summary\u201d,\u00a0Cisco XDR Automate analyzes a completed workflow run and produces a concise, human-readable explanation of its execution. This includes:<\/p>\n<p>The overall outcome of the run<\/p>\n<p>Key actions that succeeded or failed<\/p>\n<p>Errors, misconfigurations, or missing outputs that\u00a0impacted\u00a0downstream steps<\/p>\n<p>Context on\u00a0why\u00a0a failure occurred, not just\u00a0where<\/p>\n<p>In case a Workflow Run\u00a0failed:\u00a0it provided remediation steps!<\/p>\n<p>The goal is simple: help you understand the run in seconds, not minutes.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"756\" height=\"496\" data-lazy-type=\"image\" src=\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/06\/Generate-run-summary.webp\" alt=\"Generate run summary\" class=\"lazy lazy-hidden wp-image-493576\" style=\"width:561px;height:auto\"\/>Step One<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"786\" height=\"546\" data-lazy-type=\"image\" src=\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/06\/AI-Run-Summary.webp\" alt=\"AI Run Summary\" class=\"lazy lazy-hidden wp-image-493577\" style=\"width:556px;height:auto\"\/>Step Two<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"856\" height=\"1024\" data-lazy-type=\"image\" src=\"https:\/\/www.europesays.com\/ai\/wp-content\/uploads\/2026\/06\/Variables-856x1024.webp\" alt=\"Variables\" class=\"lazy lazy-hidden wp-image-493578\" style=\"width:528px;height:auto\"\/>Step Three<\/p>\n<p>Not just \u201cdump it into an LLM\u201d\u00a0\u00a0<\/p>\n<p>Under the hood, this feature combines Cisco managed AI models with deterministic heuristics and structured pre-processing. We intentionally avoid sending raw execution noise straight to a large language model.<\/p>\n<p>Instead, we:<\/p>\n<p>Classify actions and outcomes<\/p>\n<p>Filter and normalize relevant signals<\/p>\n<p>Identify\u00a0error patterns and execution gaps<\/p>\n<p>Then generate a summary grounded in the\u00a0actual workflow semantics<\/p>\n<p>This approach makes the output more reliable, more consistent, and far more useful when troubleshooting real automation logic.<\/p>\n<p>This work was done in collaboration with\u00a0<a href=\"https:\/\/outshift.cisco.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cisco Outshift<\/a>, Cisco\u2019s incubation engine.\u00a0Their AI and ML experts helped us do extensive research into a variety of AI-based features that are now on our horizon, of which the AI Run Summaries are the first to be released.\u00a0\u00a0<\/p>\n<p>Why this matters, especially for Agentic AI<\/p>\n<p>As\u00a0XDR Automate Workflows are increasingly\u00a0<a href=\"https:\/\/docs.xdr.security.cisco.com\/Content\/Automate\/activities-ai-agent.htm\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">triggered by Agentic AI<\/a>, clarity becomes non-negotiable. Humans\u00a0don\u2019t\u00a0always catch subtle failures. Output variables may not be set. Assumptions break silently.\u00a0\u00a0<\/p>\n<p>Run Summaries make workflow execution transparent and auditable, which is a prerequisite for trust, both for human operators\u00a0and\u00a0for AI Agents that depend on workflow outputs.\u00a0\u00a0<\/p>\n<p>In this first iteration, summaries are generated on demand.\u00a0Looking ahead, our direction\u00a0will move towards automatically summarizing Agentic AI-invoked workflow runs and feed those summaries back into the AI itself.\u00a0That\u2019s\u00a0how you close the loop.\u00a0\u00a0<\/p>\n<p>What\u2019s\u00a0next\u00a0\u00a0<\/p>\n<p>This feature is now live and marks the start of a broader set of out-of-the-box AI capabilities in Cisco XDR Automate\u00a0(capabilities that will obviously also extend into\u00a0<a href=\"https:\/\/documentation.meraki.com\/Platform_Management\/Workflows\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Cisco Meraki Workflows<\/a>).\u00a0\u00a0<\/p>\n<p>Less clicking. Fewer blind spots. More confidence that your automation is doing exactly what you think it is.\u00a0\u00a0<\/p>\n<p>And when it\u00a0doesn\u2019t? Now it can explain itself.<\/p>\n<p class=\"has-text-align-center\" id=\"block-a1b11bef-8542-478b-95c4-6b43d582001b\">We\u2019d love to hear what you think! Ask a question and stay connected with Cisco Security on social media.<\/p>\n<p class=\"has-text-align-center\">Cisco Security Social Media<\/p>\n<p class=\"has-text-align-center\" id=\"block-85b5e58a-7e0a-4b88-a1bd-54a5f658e51f\"><a href=\"https:\/\/www.linkedin.com\/showcase\/cisco-secure\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LinkedIn<\/a><br \/><a href=\"https:\/\/www.facebook.com\/ciscosecure\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Facebook<\/a><br \/><a href=\"https:\/\/www.instagram.com\/Ciscosecurity\/\" rel=\"nofollow noopener\" target=\"_blank\">Instagram<\/a><\/p>\n<p>\t<script async src=\"\/\/www.instagram.com\/embed.js\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"If\u00a0you\u2019ve\u00a0ever troubleshot a complex workflow run, you know the drill: click into actions, expand inputs and outputs, scan&hellip;\n","protected":false},"author":2,"featured_media":76904,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[179,24,25,111,42122,42123,1772,1782],"class_list":["post-76903","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ai","tag-agentic-ai","tag-ai","tag-artificial-intelligence","tag-artificial-intelligence-ai","tag-cisco-meraki","tag-cisco-workflows","tag-cisco-xdr","tag-xdr"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/76903","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=76903"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/76903\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/76904"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=76903"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=76903"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=76903"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}