topic How to avoid "...NOTE, too much data to present, content was truncated." in Cortex XSOAR Discussions

How to avoid "...NOTE, too much data to present, content was truncated."

Josep — Thu, 10 Nov 2022 16:09:50 GMT

Hello again,

I'm using a task to obtain IPs from a source and put them inside the context. However, the variable is truncated and it shows: "NOTE, too much data to present, content was truncated."

How can this be avoid? and use the whole context variable?

Thanks.

Re: How to avoid "...NOTE, too much data to present, content was truncated."

jfernandes1 — Fri, 11 Nov 2022 02:02:37 GMT

Hi @Josep, This is only a UI limitation. The entire list will exist in the context. You can run the !Print and check the artifact in a new tab.

I would also suggest that once you finish processing the list, it should be removed from the context or saved to a file. Large amounts of data in the context led to slow incident load and large index files.