topic Mirroring Issue in Between SOAR host and a tennat in Cortex XSOAR Discussions

Mirroring Issue in Between SOAR host and a tennat

UmutAK — Wed, 12 Apr 2023 11:50:47 GMT

Hello everyone,

We have a mirroring problem within 1 tenannt and 1 soar host/server. Both of them are in the same network/side. Some how we can search incidents from tennant to soar host, however while using mirroring integration in order to provide incident in a continous way they cannot be can not be fetched.

To examplify:

soar host/server has incidents in range 1-100 (id)

our soar tenant can get in 1-15 (id)

We ve tried and worked on integration parameters however didnt work as well. As far as we are concerned fetching issue has some kind of bug in there.

Re: Mirroring Issue in Between SOAR host and a tennat

jfernandes1 — Fri, 14 Apr 2023 03:06:55 GMT

Hi @UmutAK,

It's not clear what your issue is. Please note that XSOAR host refers to a server that contains XSOAR Tenants. An XSOAR host cannot have incidents or integrations.

If you're trying to mirror incidents between 2 tenants that exists on 2 different or even the same host, then using the XSOAR Mirroring integration is the correct. If you are not able to mirror all incidents, please check the below parameter. Change the value to range that includes all the incidents you are trying to mirror.

Once you change the value, ensure you reset the last fetched time.