topic Re: Need to Know when the incident was modified first time in Cortex XSOAR Discussions

Need to Know when the incident was modified first time

sthangapandi — Mon, 07 Oct 2024 09:56:09 GMT

I created "firstmodificationdate" field in short text type to apply all the incidents.
the purpose of that, I want to store the when the incident was modified at first time.
first medication of each incident date will be stored in the "firstmodificationdate" field for all type of incidents.

Is there any possible to do that in xsoar?

Re: Need to Know when the incident was modified first time

yuki_sato — Mon, 14 Oct 2024 15:11:52 GMT

I am not sure if you are trying to use "firstmodificationdate" to store the first modified date, or you are trying to store all of incident fields into that field?

Re: Need to Know when the incident was modified first time

pagnihotri — Thu, 17 Oct 2024 11:44:21 GMT

The quickest solution could be a field change trigger script.

Create another field which captures the last modified time of the incident and attach a field change trigger script to it

The script checks the value of "firstmodificationdate" and if it blank, updates the value from modified time to "firstmodificationdate".