topic Re: Public API change Status in Cortex XDR Discussions

Public API change Status

tlmarques — Tue, 17 Oct 2023 16:45:13 GMT

Hi,
I need your help...
In our company, we have XDR and XSOAR, and we are integrating the two products to create automation, etc.
We have already configured the API keys for both communicate, but we are still working on XDR ...

However, we are encountering a strange issue:

Whenever we close an incident in XDR, it's supposed to be closed in XSOAR as well. However, the resolution status (true positive/false positive/know issue, etc.) is always changed to 'Resolved-others' by the Public API.

Can you assist me with this?

Re: Public API change Status

aspatil — Fri, 20 Oct 2023 12:40:02 GMT

Hello Tiago,

Thank you for writing to Live community.

I am testing this scenario in my Lab, will update you soon.

Thanks for keeping patience.

Re: Public API change Status

aspatil — Fri, 27 Oct 2023 13:31:24 GMT

Hello Tiago,

I have checked the same in my Lab and found the same. I would suggest you to open a case with XSOAR TAC support to address the issue. You feedback is much appreciated.

Please mark the response as "Accept as Solution" if it answers your query.