Adding a list of IPs and Domains to Exclusion list from File in Json Format

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Adding a list of IPs and Domains to Exclusion list from File in Json Format

L2 Linker


Kindly need to add a list of IPs and Domains to exclusion list from json format.


Kindly advise how to do that and what is the needed format?


L4 Transporter

L2 Linker

Dear Metgatz,


It seem that my request has been misunderstood.


I have list of Domains URLs and IP addresses.

I want to upload them  to the exclusion list of indicators in XSOAR to not be extracted as indicators.

So i found there is an option to upload list of indicators in XSOAR from file in JSON format as seen in the screen shot.


The issue is that i don't know what is the syntax or what is the shape in json format needed to be uploaded.

L4 Transporter

A better option may be to write an automation to process the file, and then you can simply use the excludeIndicators command to add the indicators to the exclusion list once the indicators are in context. 

  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!