How to Automatically Send an Email When an Incident is Created in XSOAR?

Hello,

I want to automatically send an email whenever an incident is created in XSOAR. I’ve created a playbook and written a simple script that sends an email for a specific incident when executed within the playbook.

However, I’d like to automate th

Remove apps with Playbook XSOAR XDR

Web File Repository Integration error "Failed to execute wfr-status command"

Hi,

Anyone encountered the following error when executing "wfr-status"?

CSOAR Pre processing rule with scheduled jobs

How can we set the preprocess rule to drop any incidents created by schedule jobs?

For example: any incident category=job and some incident field like description contains "False". The playbook in schedule Job, will run some tasks and condition and

Securonix

Can someone help me? I have created an instance in the Securonix integration but I want to fetch incidents but I do not get the alerts from my SIEM SECURONIX. It should be noted that the user and everything is correct. But I would like to know if any

How to use dashboard filter query in Scripts

How to use, dashboard filter query in scripts?

Cortex XSOAR 

Query on Filtering Closed Incidents by Time Frame in XSOAR dashboard

I'm in the process of creating a widget and need help retrieving details of incidents that were closed within a specific week or time frame, irrespective of their creation date. Additionally, I would like to know if there's a method to achieve this w

Couldn't sort by date in bar graph widget in Dashboard

We couldn't sort by date in bar graph widget in custom dashboard. We are in XSOAR 8.7.

Please assist.

Set Incident values from Integration

Hello all,

I have customized a ticketing integration to our image. The last part I'm struggling with is returning values from the integration to incident fields.

My usecase is that, SOC analyst will create a ticket inside our ServiceDesk application

Alert when XSOAR doesn't fetch incidents for a certain integration.

Is there a way to receive an alert when no incidents are fetched in XSOAR for a certain integration for by example 24 hours. Not related to integration issues but if the integration works but nothing is fetched? 

Would be beneficial to know if there i

Properly aligned and comprehensive report for XSOAR Incident

Hi all,

The current XSOAR incident report is unclear and poorly formatted. We need a properly aligned report to serve as the basis for our reporting.

Is there any way for this or any available template that we could use?

Thanks in advance.