Field Change Script To System Fields

pagnihotri — Tue, 19 Nov 2024 20:39:58 GMT

Hey Community
Did anyone ever attach a field change trigger script to a system field?

I guess it can't be done directly but is there a work around?

Also, is there a way to run a script as soon as incident is created

Re: Field Change Script To System Fields

JakubKostial — Thu, 28 Nov 2024 13:40:49 GMT

Hi, can you give specific example what fields you would like to change? Overall, yes, you can change system fields inside incident via trigger script. But there seems to be few bugs in SOAR, which may limit this function.

To run script as soon as the incident is created have a look at pre-processing with action "run script".
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.13/Cortex-XSOAR-Administrator-Guide/Rule-Actions-for-Pre-Process-Rules

topic Re: Field Change Script To System Fields in Cortex XSOAR Discussions

Field Change Script To System Fields

Re: Field Change Script To System Fields