<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Report exporting questions in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457205#M1419</link>
    <description>&lt;P&gt;I have a custom timer filed called analysttimer, which recording the time analyst spend on an incident, once the incident this field will shows total time spend. I can see the total time is captured in the analysttimer.totalduration field.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When create a report, I can only refer analysttimer filed as whole in the widget, rather than directly refer to analysttimer.totalduration as column.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;It shows the actual mins if I look at the report directly in XSOAR, however if I export this report to a CSV or PDF the column shows the status of the analysttimer rather than the actual mins as attached image shows.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As anyone see this before? any suggestion how can I get the actual mins in the CSV file?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you in advance&lt;/P&gt;</description>
    <pubDate>Thu, 06 Jan 2022 08:57:46 GMT</pubDate>
    <dc:creator>LinsongGuo</dc:creator>
    <dc:date>2022-01-06T08:57:46Z</dc:date>
    <item>
      <title>Report exporting questions</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457205#M1419</link>
      <description>&lt;P&gt;I have a custom timer filed called analysttimer, which recording the time analyst spend on an incident, once the incident this field will shows total time spend. I can see the total time is captured in the analysttimer.totalduration field.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;When create a report, I can only refer analysttimer filed as whole in the widget, rather than directly refer to analysttimer.totalduration as column.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;It shows the actual mins if I look at the report directly in XSOAR, however if I export this report to a CSV or PDF the column shows the status of the analysttimer rather than the actual mins as attached image shows.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As anyone see this before? any suggestion how can I get the actual mins in the CSV file?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you in advance&lt;/P&gt;</description>
      <pubDate>Thu, 06 Jan 2022 08:57:46 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457205#M1419</guid>
      <dc:creator>LinsongGuo</dc:creator>
      <dc:date>2022-01-06T08:57:46Z</dc:date>
    </item>
    <item>
      <title>Re: Report exporting questions</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457426#M1423</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/198665"&gt;@LinsongGuo&lt;/a&gt;&amp;nbsp;is the question for XSOAR? This is a XDR forum.&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jan 2022 02:36:57 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457426#M1423</guid>
      <dc:creator>bbarmanroy</dc:creator>
      <dc:date>2022-01-07T02:36:57Z</dc:date>
    </item>
    <item>
      <title>Re: Report exporting questions</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457692#M1429</link>
      <description>&lt;P&gt;oh sorry yes it is XSOAR question can you move it or I should create another one?&lt;/P&gt;</description>
      <pubDate>Sun, 09 Jan 2022 21:13:02 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457692#M1429</guid>
      <dc:creator>LinsongGuo</dc:creator>
      <dc:date>2022-01-09T21:13:02Z</dc:date>
    </item>
    <item>
      <title>Re: Report exporting questions</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457714#M1432</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/198665"&gt;@LinsongGuo&lt;/a&gt;&amp;nbsp;It's best you mark this as Solved and create a new topic in the XSOAR forum.&lt;/P&gt;</description>
      <pubDate>Mon, 10 Jan 2022 03:07:33 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/report-exporting-questions/m-p/457714#M1432</guid>
      <dc:creator>bbarmanroy</dc:creator>
      <dc:date>2022-01-10T03:07:33Z</dc:date>
    </item>
  </channel>
</rss>

