05-15-2025 07:49 AM
Hello LiveComm,
I have created a custom case with a single Issue for a Use-Case.
I want to create more issues with a command or script in this custom case which will eventually be a playbook task. How does one do such an action?
Many thanks,
MSysec
05-20-2025 04:10 AM
I have received a solution from Palo Alto directly (Name Omitted). We can use the external API for XSIAM by using the "Create a Custom Alert". Take note that this creates a new issue, and is recommended that you define at least a Low Severity in order to see it in the issues menu. I hope that Palo Alto updates their API documentation to reflect Cases and Issues instead of Incidents and Alerts so that we could avoid this ping-pong. I hope this helps people who have the same issue as me.
MSysec.
Link to API DOCs Alert Command.
05-20-2025 04:10 AM
I have received a solution from Palo Alto directly (Name Omitted). We can use the external API for XSIAM by using the "Create a Custom Alert". Take note that this creates a new issue, and is recommended that you define at least a Low Severity in order to see it in the issues menu. I hope that Palo Alto updates their API documentation to reflect Cases and Issues instead of Incidents and Alerts so that we could avoid this ping-pong. I hope this helps people who have the same issue as me.
MSysec.
Link to API DOCs Alert Command.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
