topic Re: Recurrent data input problems in tasks in Cortex XSOAR Discussions

Recurrent data input problems in tasks

Josep — Sun, 15 Jan 2023 12:11:15 GMT

Hello,

Data key received from API calls don't always have the same format in the context. Example:

Sometimes it could be:

data.[0].results.username

data.results.[0].username

data.[0].results.[0].username

data.results.username

The API call is the one creating these formats in the context. There's no possibility to change the call.

How can the input for the task be modified to accept all format possibilities?

Re: Recurrent data input problems in tasks

michaelsysec242 — Sun, 15 Jan 2023 14:32:19 GMT

Hello,

To be honest it very much depends on how and where you want to use the data. There are quite a few options for dealing with context data dynamically such as "ContextFilter" :

Explanation - Filter context keys by applying one of the various available manipulations and storing in a new context key. Please notice that the resulting context key will not be available automatically as an option but you can still specify it.

From experience however I would recommend to write a custom automation script that will dynamically interact and sort the data from the key "data". This way you can see exactly what you mare working with and provide Attestation for each stage of further interaction. In any case please elaborate on what you plan on doing with the data you have received, perhaps others would be able to provide a more direct solution.

Re: Recurrent data input problems in tasks

Josep — Mon, 16 Jan 2023 07:27:26 GMT

Hello Michael, thanks for your help.

So the idea is to create a small script to check which variable is defined and give a new output.

Nice idea! I'll take a look at "ContextFilter", to see how it works.