https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/questions-regarding-the-operation-of-cortex-xsoar/m-p/595236#M3544 <P><SPAN>Hi Team, </SPAN></P> <P><SPAN>I have some questions regarding the operation of Cortex Xsoar and need assistance </SPAN></P> <P><SPAN>1. I bought a license for 5 users. Does that mean you can only create 5 users or only 5 users can be active at the same time?&nbsp; </SPAN></P> <P><SPAN>2.&nbsp;</SPAN><SPAN>How to classify incident ingress from ibm qradar</SPAN></P> <P><SPAN>3. Can I use 2 nested DT query sessions? ${subplaybook-${CurrentPlayBookID}.MaxMind.Geo.Continent}</SPAN></P> <P>&nbsp;</P> <P><SPAN>I have created more local users than licensed users. So Cortex xsoar's behavior for users exceeding 5 If I integrate with AD to authenticate users, if more than 5 users log in at the same time, what will be the behavior of cortex xsoar for users exceeding 5?</SPAN></P> <P>&nbsp;</P> <P><SPAN>Thanks</SPAN></P> Mon, 19 Aug 2024 14:34:37 GMT assubramania 2024-08-19T14:34:37Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/questions-regarding-the-operation-of-cortex-xsoar/m-p/595236#M3544 <P><SPAN>Hi Team, </SPAN></P> <P><SPAN>I have some questions regarding the operation of Cortex Xsoar and need assistance </SPAN></P> <P><SPAN>1. I bought a license for 5 users. Does that mean you can only create 5 users or only 5 users can be active at the same time?&nbsp; </SPAN></P> <P><SPAN>2.&nbsp;</SPAN><SPAN>How to classify incident ingress from ibm qradar</SPAN></P> <P><SPAN>3. Can I use 2 nested DT query sessions? ${subplaybook-${CurrentPlayBookID}.MaxMind.Geo.Continent}</SPAN></P> <P>&nbsp;</P> <P><SPAN>I have created more local users than licensed users. So Cortex xsoar's behavior for users exceeding 5 If I integrate with AD to authenticate users, if more than 5 users log in at the same time, what will be the behavior of cortex xsoar for users exceeding 5?</SPAN></P> <P>&nbsp;</P> <P><SPAN>Thanks</SPAN></P> Mon, 19 Aug 2024 14:34:37 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/questions-regarding-the-operation-of-cortex-xsoar/m-p/595236#M3544 assubramania 2024-08-19T14:34:37Z https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/questions-regarding-the-operation-of-cortex-xsoar/m-p/595251#M3546 <P>1. 5 user accounts in XSOAR</P> <P>2. Check out video 3 of the XSOAR Engineer Training on YouTube. <A href="https://youtu.be/TW-q2wmchZk?si=VyXu5vuOSuk4NCE5" target="_blank">https://youtu.be/TW-q2wmchZk?si=VyXu5vuOSuk4NCE5</A></P> <P>3. I don't believe this is possible, but test with a test incident and see what errors or output it throws at you</P> Mon, 19 Aug 2024 17:22:24 GMT https://live.paloaltonetworks.com/t5/cortex-xsoar-discussions/questions-regarding-the-operation-of-cortex-xsoar/m-p/595251#M3546 cmcneil 2024-08-19T17:22:24Z