Help with retrieving list of XSOAR items

weijielim — Fri, 31 Jan 2025 04:55:33 GMT

Hi all,

I am looking to build an inventory list of everything we have within XSOAR, such as:
All playbooks, dashboards, integrations regardless of whether or not we use them.

Extra points if we also know the author of each item, and / or the last person that modified the item.

I know that we can check the web console but it would be great if we can generate a list to get the above information. Thanks in advance!

Re: Help with retrieving list of XSOAR items

ctopay — Thu, 06 Feb 2025 15:51:55 GMT

API can do some.
For the content pack items: https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/9ac1vvpehxcsh-get-metadata-for-all-installed-content-packs
Dashboards: https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/52h3p82roa90h-get-all-dashboards-details

etc.(Please check all endpoints): https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/sj83ddzz60ukq-get-all-incident-fields-in-the-tenant
note: Export content function in the About > Troubleshooting page is also useful to export all "custom content". Then, you can programmatically find/sort them, but it doesn't cover OOTB objects.

But your use case seems to be more on the content objects side. Are you using Remote Repositories? > https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.8/Cortex-XSOAR-On-prem-Documentation/Push-content-from-a-development-tenant
There(in the private repo), you can see all your OOTB + custom content in the repository. If you are already using the DEV to PROD, you can track the changes and implement an advanced change control flow, too.
Owner info, however, is not supported; for CRUD actions you can check the management audit logs. Or a bit above Remote Repos approach, a CI/CD-based implementation would help you achieve all ownership, code tracking on push/pull, artifactory,etc. (But needless to say, it's not OOTB flow, a complete custom implementation path: https://xsoar.pan.dev/docs/reference/packs/content-management)

topic Help with retrieving list of XSOAR items in Cortex XSOAR Discussions

Help with retrieving list of XSOAR items

Re: Help with retrieving list of XSOAR items