Demisto : How to display List of Messages

JSannake — Thu, 22 Oct 2020 17:20:13 GMT

Hi Team, I am using create_incident API to create incidents. Below is the sample code. I can create an incident when I use "messages" as String. Basically, this is custom_fields and its data vary from incident to incident. Some incidents may have 0 messages in the string array or some may have 10 messages.

-------------------------------------------------------------

api_instance = demisto_client.configure(base_url=base_url, api_key=api_key, debug=False, verify_ssl=False)
create_incident_request = demisto_client.demisto_api.CreateIncidentRequest()

create_incident_request.name = 'Sample1 Incident with custom fields'
create_incident_request.type = 'Access'
create_incident_request.owner = 'Admin'
create_incident_request.custom_fields= {'src': '1.1.1.1',
'dest': '192.168.1.1',
'malwarefamily': 'Trojan.Generic',
'filehash': '142b638c6a60b60c7f9928da4fb85a5a8e1422a9ffdc9ee49e17e56ccca9cf6e',
'vendorproduct': 'Secure Producnt',
'messages':"[{'messageid': 1, 'messagedetails':'First Message'}, {'messageid': 2, 'messagedetails':'Second Message'}]"
}

try:
    api_response = api_instance.create_incident(create_incident_request=create_incident_request)
    print(api_response)
except ApiException as e:
    print("Exception when calling DefaultApi->create_incident: %s\n" % e)

Is there any field type I can choose or Any way I can show these custom_fields messages in the form of a table on the incident screen?

Thanks in advance.

Re: Demisto : How to display List of Messages

gjenkins — Thu, 03 Dec 2020 21:10:29 GMT

Hi JSannake,

It looks like you have a query for the XSOAR community. I would recommend posting this inquiry in their Live Community section.

topic Demisto : How to display List of Messages in Cortex XDR Discussions

Demisto : How to display List of Messages

Re: Demisto : How to display List of Messages