Can I configure XSOAR Engine used to run playbooks, instead of the XSOAR instance itself, and if yes what is the configuration steps, sizing, ..etc Cortex XSOAR
Hi there, looking to see if we can send limited number (subset) of devices from Palo IOT XSOAR integration to Cisco ISE instead of the full set. ref > https://docs.paloaltonetworks.com/iot/integration/network-access-control/integrate-iot-security-with-cisco-ise/set-up-iot-security-and-xsoar-for-cisco-ise-integration
Anyone using XSOAR File Management.? I am getting below error when trying to run any command Failed to execute test-module command. Error: Failed to parse json object from response: b'<!doctype html>\n<html lang="en">\n<head>\n <meta charset="utf-8">\n <title>Cortex Sign-In</title>\n <base href="./">...
What I hate about Palo Alto to not give any option for learning and home labs, and all their education programs are waste of money. XSOAR community was great and this is how people build lots of playbooks and integration on XSOAR free for Palo Alto.. I don't understand point to remove it.
Hello All,I wanted to obtain a copy of Cortex XSOAR community edition for my practice lab as I need to test and deploy playbooks at my work. After going through different discussions here I could not find a working method to obtain a copy of Cortex XSOAR community edition. I would really appreciate if someone could help me with this.Best,FM
Hello,in our team we have two groups of engineers - one are developers, who mostly edit code locally via VSCode with combination of demisto-sdk. Second group is creating playbooks, managing integrations, mappers and so on via XSOAR UI.We are at the beginning of implementing version control (private GitHub repo) of our custom content. But we have...
Hello Everyone, We're currently focused on improving our access control model to limit the visibility of certain incident types based on user roles. Currently, this is done manually through the system command: ```/set_incident role = <role name>``` This command is executed at each incident level and isn't available for execution within pla...
Hello, I want to use the "GetFailedTasks" built-in automation to take some actions on the failed tasks and playbooks. The challenge i'm facing is parsing off fields from the output of the "GetFailedTasks" in playbook, namely "Task ID" and "Task Name" fields. The output is JSON dict, below is sample output of three failed tasks: [{"Command Name...
Hello team, I attempted to export the values of custom SLA fields into a CSV report. When I tried to create the report through the UI, it displayed the timer values, but when I actually generated the report, it only showed the run status (running or ended). Subsequently, I also tried using the automation "ExportIncidentsToCSV" to include the cus...
Hey I'm getting this error when I try to use Data collection (Task Only) No communication method found for form "". Task can be completed manually Has anyone encountered this and can help? 😊
Hello LiveComm, I am trying to establish the Proofpoint Protection Server v2 integration on my XSOAR to use the SmartSearch and other cool features. I am doing this for a supported pphosted (POD) version and have created API credentials for this and I get a 401 Unauthorized for Test and other commands. The instructions to do this are a bit ambig...
Is anyone else missing scripts when adding a button to layout? Not seeing any scripts from the installed content packs. They still work via CLI. Cortex XSOAR
Hi everyone, I'm encountering an issue with an automation script in XSOAR that uses openpyxl to insert an image into an Excel file. Even though the Excel file I'm uploading is valid (I’ve tested it by downloading it and opening it in Excel—it opens without any problems), the script throws the following error when executed in XSOAR: Error oc...
Hello, There is a place where I need to use generic polling but I can't solve this error. My script is as follows. where could be the problem here? def check_runid(client: UC4Client, args: Dict[str, Any]): runid: str = args.get('run_id') url = f"{client.base_url}/{runid}" response = requests.get(url, auth=(client.api_user, client.api_pass...
I have two xsoar tenant one is dev and other is prod. on prod i have main tenant and tms tenant. i pushed content from dev to repo and from main on prod side get the content from git. i saw push is fine and commit is succesful when push from dev side but when trying to install content on prod it showed nothing. any solution pls Cortex XSOAR ...
