topic Re: Function to get the date when "Common Scripts" were updated in Cortex XSOAR Discussions

Function to get the date when "Common Scripts" were updated

SanDev — Sat, 25 Feb 2023 11:33:51 GMT

Hello,

We'd like to to get the date when "Common Scripts" were updated. Is there any function to get it?

Re: Function to get the date when "Common Scripts" were updated

shumbert — Thu, 13 Apr 2023 14:58:03 GMT

Hiya,

Let me make sure I understand the ask. You'd like to be notified when Common Scripts has been updated in your xsoar environment?

Re: Function to get the date when "Common Scripts" were updated

jfernandes1 — Fri, 14 Apr 2023 02:40:52 GMT

Hi @SanDev,

You should be able to see the last updated date in the below places.

On the Automation page:

On the Marketplace page:

Re: Function to get the date when "Common Scripts" were updated

shcrews — Fri, 19 May 2023 21:46:18 GMT

Enable Content Pack Update Notifications

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Administrator-Guide/Content-Pack-Update-Notifications

Re: Function to get the date when "Common Scripts" were updated

cpayne26 — Mon, 22 May 2023 15:42:12 GMT

You can pull the information for installs if you're looking for when something was installed by going to Settings > User and Roles > Audit Trail. Here's a sample query to get you started object:ContentPack and type:install and action.ID:CommonScripts modified:>2023-04-01T00:00:00

Here's the reference in the admin guide https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.5/Cortex-XSOAR-Administrator-Guide/Audit-Trail

Here's a command that pulls no more than 200 entries for common script installs from the past 3 months. You can see more syntax under getAudit in the api guide https://<yourdomain name>/api#_getaudits
!demisto-api-post uri=/settings/audits body="{\"page\":0,\"size\":200,\"query\":\"object:ContentPack and type:install and action.ID:CommonScripts\", \"period\": {\"by\": \"\",\"byfrom\": \"months\", \"toValue\": null, \"fromValue\": 3, \"field\": \"\" }}"