topic Re: Disable auto assign incidents in Cortex XSOAR Discussions

Disable auto assign incidents

joshuajohnsonco — Fri, 06 Oct 2023 18:14:19 GMT

Currently, XSOAR is randomly assigning incidents to users. This includes user accounts who will never work incidents.

As I understand this is the default built-in process.

I looked at the AssignAnalystToIncident script, but really don't know what needs to be updated here.

I would like to completely disable the auto assigning of incidents.

I do not want to setup shift management.

What is the most straight forward way to disable this, so our analysts can manually grab incidents.

Re: Disable auto assign incidents

MBeauchamp2 — Fri, 06 Oct 2023 19:24:55 GMT

Take that task out of your playbooks, and setup dashboards that they can use.

Re: Disable auto assign incidents

joshuajohnsonco — Fri, 06 Oct 2023 19:34:43 GMT

Such an easy answer. I didn't realize the playbooks in question were the ones doing the assignment. Thank you for pointing me in the right direction here.