topic Re: Convert Multiple Files in Cortex XSOAR Discussions

Convert Multiple Files

axespera — Tue, 06 Dec 2022 19:04:09 GMT

Hello, I am trying to convert multiple files with different extensions using the 'ConvertFile' automation, so that it can be display on the layout. However, when there are different types of files in one incident, it keeps giving me an error. What would be the best way to list all files and convert them by EntryID? Here what I currently have configure with the fields and transformations.

Re: Convert Multiple Files

chrking — Wed, 07 Dec 2022 01:00:01 GMT

What error are you getting? ConvertFile can handle multiple files of different types with no issues (just tested on my instance), so if there's an issue with what you've got it seems likely it's in the Filter/Transformer section.

I note that your "Where" section seems to be missing an OR before the final entry.

What do you get if you use the Filter/Transformer test panel with context from an incident?

Re: Convert Multiple Files

axespera — Wed, 07 Dec 2022 16:22:18 GMT

The error I get most of the time is says that it cannot find the EntryID. Also sometimes the task takes a long time and then it gives the error. Not sure why.

This is the output I get when I try the test panel from an incident, those are the correct EntryID.

Re: Convert Multiple Files

chrking — Thu, 08 Dec 2022 00:37:09 GMT

Hmm, when I try with a filter I get similar test output and it works.

I was able to get this error: "Failed converting file. General exception: failed to get artifact file path, invalid file (52)" by manually deleting the referenced files from /var/lib/demisto/artifacts - can you check that directory to make sure the expected files are still there?