topic Re: Get the output of demisto.results() inside an automation for "msgraph-download-file" in Cortex XSOAR Discussions

Get the output of demisto.results() inside an automation for "msgraph-download-file"

Josep — Fri, 19 May 2023 12:20:42 GMT

Hello,

We'd like to use the command "msgraph-download-file" insde an automation, then use the FileID to import a csv and finally convert it to pandas. The problem we find is that the output of "msgraph-download-file" is completely different when it's is used inside an automation.

How can we get this file inside an automation?

Re: Get the output of demisto.results() inside an automation for "msgraph-download-file"

Josep — Fri, 19 May 2023 12:42:10 GMT

Re: Get the output of demisto.results() inside an automation for "msgraph-download-file"

MBeauchamp2 — Fri, 19 May 2023 14:43:26 GMT

How about just opening the file with the automation after the playbook downloads and returns it?

Pass in the entryid of the file to the automation, and just have the automation go open it?

entry_id = demisto.args().get('entry_id') res = demisto.getFilePath(entry_id) if not res: return_error("No file with that entry id found") file_path = res.get("path") with open(file_path, 'rb') as f: data = f.read() # do something with the data.

Re: Get the output of demisto.results() inside an automation for "msgraph-download-file"

Josep — Fri, 19 May 2023 15:30:54 GMT

Thanks for the response,

we'd like to all the process inside the automation, download the file, open it and finally convert it to pandas.

Re: Get the output of demisto.results() inside an automation for "msgraph-download-file"

Josep — Tue, 06 Jun 2023 14:34:52 GMT

Thank you very much for answering,

the key is that we would like to be able to directly use the "msgraph-download-file" command inside the automation, without the need to create a playbook with a task using the function to set the "File" in the context.We'd like to use the direct output of:

demisto.executeCommand("msgraph-download-file" ,{vars})

Re: Get the output of demisto.results() inside an automation for "msgraph-download-file"

chrking — Thu, 06 Jul 2023 04:20:22 GMT

The problem is that the direct output of msgraph-download-file is *not* a file, it's a war room entry which contains a reference to a file. Until that war room entry has been written and the file reference is usable, it's not possible to get the data contained in the file. The only way to do that is to have two separate tasks, which requires a playbook.

If you absolutely can't use a playbook for some reason, the only option I see is to modify the integration to add a variant of msgraph-download-file which does the required pandas processing before returning anything.