topic Re: SearchIncidentsV2 doesn't obtain only incidents with the exact name. in Cortex XSOAR Discussions

SearchIncidentsV2 doesn't obtain only incidents with the exact name.

Josep — Fri, 13 Jan 2023 18:30:48 GMT

Hello,

I'm using !SearchIncidentsV2 query=`name: "This is a test"`, just to find the incidents with name "This is a test". However, when the command is executed, it shows not only those incidents but also incidents with longer names, for example: "This is a test (russ)".

How can the command limit to the strict words?

Re: SearchIncidentsV2 doesn't obtain only incidents with the exact name.

MBeauchamp2 — Fri, 13 Jan 2023 18:58:45 GMT

Use rawName instead of Name.

!SearchIncidentsV2 query=`rawName:"This is a test"`

Re: SearchIncidentsV2 doesn't obtain only incidents with the exact name.

Josep — Fri, 13 Jan 2023 20:43:14 GMT

It worked!! TY 😀