topic XSOAR - Transform Language in Cortex XSOAR Discussions

XSOAR - Transform Language

G.Anshar — Thu, 08 May 2025 09:47:45 GMT

Hello everyone, I would like to ask how to get the user.name value from this context data.
I tried using the syntax ${incident.labels.user.name}, but it didn’t work.

Here's the context structure:

{ incident: { ... labels: { user.name: "john doe", ... } ... } }

Any suggestions?

Re: XSOAR - Transform Language

JStephan — Thu, 08 May 2025 12:47:50 GMT

Hey there,

that looks a bit strange, as a general hint, the context data (once you open it) the keys are clickable and will copy the path to clipboard.

So it would be an idea to use that and check the path.

I must confess that as this are Javascript Objects I would expect user_name instead of user.name to be in the labels

Re: XSOAR - Transform Language

G.Anshar — Fri, 09 May 2025 01:49:04 GMT

Thank you for your response @JStephan . When i clicked the key it showed

incident.labels.user.name

i was able to solve the issue by adding a new object that retrieves the value from

user.name

object.

Thanks for the hint!