topic Re: How do I get the numeric incident id in an automation? in Cortex XSOAR Discussions

How do I get the numeric incident id in an automation?

Raoul — Fri, 21 Oct 2022 03:17:48 GMT

I'm working with a Python automation, and I need to get the numeric incident id. I expect this id to be numeric (123456) but it is always a long concatenated hex string and GUID.

incident = demisto.incidents()[0]
incident_id = incident['id']
print(incident_id )

Output is: 89a633e1ef019afeee78fbb2ac23ee84$&$234f4f55-5c46-44b1-8662-6f65039a9a0c

I need a ordinal numeric value like #19119 (number seen in incidents list). How are these ids related?

Re: How do I get the numeric incident id in an automation?

ABurt — Fri, 21 Oct 2022 07:11:24 GMT

If you are running this command as a test in the playground, the playground always returns this GUID like string.

Running it in a real incident should return the incident ID.

You can also use demisto.incident() to get the incident data of the incident in which the script is running in (rather than getting all incidents and pulling the first one off the list).

Regards

Adam