XSOAR Lot of big incidents-how to automate ?

assubramania — Thu, 11 Apr 2024 18:29:17 GMT

Hi Team,

I have a customer where there are lot of big incident, (>10mb). Is there any function that automate to delete the big incident?

In system diagnostics, the big context and big incident, they want to delete them, automatically. Is it possible?

I am waiting for prompt response.

Thank you.

Re: XSOAR Lot of big incidents-how to automate ?

gmiguelvall — Fri, 12 Apr 2024 17:59:10 GMT

Hi @assubramania

Thank you very much for reaching out to us about this question. There is a command that you can use that will delete an incident. The command you could use would be

!core-delete-incidents ids=<id of incident to delete>

In order to delete multiple incidents at a time. You can put them in a comma separate list like the below command:
!core-delete-incidents ids="9655, 9656"

topic Re: XSOAR Lot of big incidents-how to automate ? in Cortex XSOAR Discussions

XSOAR Lot of big incidents-how to automate ?

Re: XSOAR Lot of big incidents-how to automate ?