topic Delete List using automation/command? in Cortex XSOAR Discussions

Delete List using automation/command?

JOng39 — Wed, 08 Jun 2022 08:05:30 GMT

Hi All,

I wanted to delete a list using a playbook tasks, but I dont find any automation that can achieve it. It only have createList, and remove data from List

May I know any workaround for it?

Regards,

Jia Kai

Re: Delete List using automation/command?

nkazinets — Wed, 08 Jun 2022 08:54:01 GMT

Hey Jia Kai, you could write an automation that makes an API call to delete the list - you'll need to have the Demisto REST API integration configured for this.

The API method used is POST to the following endpoint: /lists/delete (if multi-tenant: /acc_<tenant_name>/lists/delete )

And the request body would be:{"id":"<list_name>"}

The basic script would look something like this (add whatever is needed to print a result, set to context, etc.)

listName = demisto.args().get("list_name")
body = {"id": listName}

demisto.executeCommand("demisto-api-post", {"uri":"/lists/delete", "body":body})

Re: Delete List using automation/command?

Sec101 — Thu, 22 Jun 2023 18:47:47 GMT

Why isn't this native to xsoar?

Re: Delete List using automation/command?

JLevine — Wed, 27 Sep 2023 13:44:11 GMT

@Sec101 I am going to create a wrapper automation for this very functionality. Of course, this will be dependent on the "Core REST API" being configured and enabled.

I ran into a scenario requiring this capability and just completed a working demo.