10-03-2022 07:58 AM
Should there be any concerns regarding to XSOAR server engine load if mirroring continues to run after closed XSOAR incidents?
Note: This question was asked during the Cortex XSOAR Customer Success Webinar: Mirroring
10-03-2022 07:59 AM
A response from the CS webinar team:
No, because there are limited fields that can be modified once an incident is closed. For example, once an incident is closed, if you try to add another note to the war room, you will get an error saying the incident is closed and would need to be reopened to add more information. There are only a few fields that are still editable after closure (in both ServiceNow and XSOAR), so there is no concern regarding the server or engine load.
10-03-2022 07:59 AM
A response from the CS webinar team:
No, because there are limited fields that can be modified once an incident is closed. For example, once an incident is closed, if you try to add another note to the war room, you will get an error saying the incident is closed and would need to be reopened to add more information. There are only a few fields that are still editable after closure (in both ServiceNow and XSOAR), so there is no concern regarding the server or engine load.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
