https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514905#M1196 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/226640">@Josep</a>,&nbsp;</P> <P>&nbsp;</P> <P>Are you referring to incident mirroring. Refer -&nbsp;<A href="https://xsoar.pan.dev/docs/reference/integrations/q-radar-v3#mirroring" target="_blank">https://xsoar.pan.dev/docs/reference/integrations/q-radar-v3#mirroring</A>.</P> <P>&nbsp;</P> <P>Without incident mirroring, the only way to refetch incidents is by resetting the last run time inside the integration.&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2022-09-15 at 1.39.17 pm.png" style="width: 338px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43859i54350001246FCE0E/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Screen Shot 2022-09-15 at 1.39.17 pm.png" alt="Screen Shot 2022-09-15 at 1.39.17 pm.png" /></span></P> <P>(Note:&nbsp; This will create duplicate incidents)</P> Thu, 15 Sep 2022 03:41:51 GMT jfernandes1 2022-09-15T03:41:51Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514699#M1187 <P>Is there a form to reload the QRadar inicial values for the incident in case it didn't extract them?</P> <P>&nbsp;</P> <P>Once QRadar set his values in incident context there's no way to reload them in case of error.&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Tue, 13 Sep 2022 10:07:57 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514699#M1187 Josep 2022-09-13T10:07:57Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514905#M1196 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/226640">@Josep</a>,&nbsp;</P> <P>&nbsp;</P> <P>Are you referring to incident mirroring. Refer -&nbsp;<A href="https://xsoar.pan.dev/docs/reference/integrations/q-radar-v3#mirroring" target="_blank">https://xsoar.pan.dev/docs/reference/integrations/q-radar-v3#mirroring</A>.</P> <P>&nbsp;</P> <P>Without incident mirroring, the only way to refetch incidents is by resetting the last run time inside the integration.&nbsp;<span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Screen Shot 2022-09-15 at 1.39.17 pm.png" style="width: 338px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/43859i54350001246FCE0E/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="Screen Shot 2022-09-15 at 1.39.17 pm.png" alt="Screen Shot 2022-09-15 at 1.39.17 pm.png" /></span></P> <P>(Note:&nbsp; This will create duplicate incidents)</P> Thu, 15 Sep 2022 03:41:51 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514905#M1196 jfernandes1 2022-09-15T03:41:51Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514950#M1198 <P>Thank for the reply, I'll check</P> <P>&nbsp;</P> Thu, 15 Sep 2022 11:20:57 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514950#M1198 Josep 2022-09-15T11:20:57Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514951#M1199 <P>'Reset the "last run" timestamp' does not appear. But even if I could do it how it would affect the other incidents?</P> Thu, 15 Sep 2022 11:29:35 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/reload-qradar-incident-information/m-p/514951#M1199 Josep 2022-09-15T11:29:35Z