topic Re: Make a section in layout a static list? in Cortex XSOAR Discussions

Make a section in layout a static list?

EspenAbildgaard — Tue, 22 Nov 2022 08:46:20 GMT

Hi all!

I've been looking at trying to make a section in a layout a static list, but could not find any easy ways to do it.

Essentially what I am looking for is:

I have a layout, in which I have a section called X. Now what I want is that every time an incident is created, the section field X is populated with the contents of a list called Y.

The contents of the list will be different depending on what account / tenant the incident is created under, and they all share the same layout.

The simplest way I have found so far is to have a task which takes the contents of the list, assigns it to a key, and then the section X contains this key.

But surely this doesn't seem to be the easiest way. I would prefer if I could avoid having to run a playbook every time...

Re: Make a section in layout a static list?

MBeauchamp2 — Mon, 28 Nov 2022 16:29:06 GMT

You'll need to use a dynamic section, which is a type of automation.

There is a training video on dynamic sections, that actually covers pulling data from an XSOAR list on the XSOAR Engineer series:

https://live.paloaltonetworks.com/t5/cortex-xsoar-how-to-videos/cortex-xsoar-how-to-customer-success-engineering-training-video/ta-p/484604

The example dynamic section they did is also apart of the Case Management - Generic Pack in the XSOAR Marketplace, and can serve as a great example, it's called CaseMgmtAnalystTools:

https://cortex.marketplace.pan.dev/marketplace/details/CaseManagementGeneric/

Re: Make a section in layout a static list?

EspenAbildgaard — Tue, 06 Dec 2022 11:19:01 GMT

This worked perfectly, thank you for the instructions @MBeauchamp2 !