topic Too much data to present, content was truncated. in Cortex XSOAR Discussions

Too much data to present, content was truncated.

K.Panchavati — Sat, 14 Dec 2024 06:06:41 GMT

SOAR is currently displaying only 49 values and then showing the message: "Too much data to present, content was truncated." Do you have any suggestions on how we can store the entire output? I’ve already saved all the values as a PDF attachment. Is there a way to search for a specific keyword within the PDF? Does XSOAR provide a command for this?

Re: Too much data to present, content was truncated.

pagnihotri — Thu, 19 Dec 2024 14:46:55 GMT

XSOAR doesn't display that data however you could run through it. Basically, it is there on the incident and you could search through DT transformer or fetch it through regex depending on your use case.

Reading PDF can be done via ReadPDFFileV2 script.

Re: Too much data to present, content was truncated.

BRowe_23 — Tue, 07 Jan 2025 18:59:58 GMT

In some cases, you can insert a playbook step “PrintContext” just before or after the step you are troubleshooting. Then pause the playbook in the subsequent step. You can observe the contents of your value with this. Im pretty sure there are limits, but it seems to work for me for objects with a few hundred elements. Enough to see what I need to see, then I remove the PrintContext step.