In the new Incident Creation Form in Cortex XSOAR. Is it possible to change the default value of the "Owner" field ? Ideally to NA (No Owner Assigned)?
I'm looking to establish a hierarchical relationship for linking incidents in XSOAR, specifically a parent-child structure. Currently, the platform allows for linking incidents without hierarchy and creating child incidents under a parent ticket. However, it does not permit linking existing incidents as children. Is there a way to add existing...
Hi, We create two different queries by changing the date range in the reports. These two queries show a different number of incidents for the same day (Jun 24). We tried various queries in the query field. The result did not change both with and without the query. Is there anyone experiencing this issue and finding a solution?
Hello, I created a simple widget using Python. The code fetches a list from XSOAR, extracts a number, and the widget displays that number. Nothing more. The widget works perfectly when viewed in the report interface or when executed in the playground. However, when the report is scheduled, it shows a "JavaScript" error. Could you help me unders...
Hi Everyone, I need to run phishing model and for that I need demisto/ml docker image. I intsalled machine learning content pack but still not get or see this docker image thats why I'm unable to run that model. I also ready info from here but still confused https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.11/Cortex-XSOAR-Administrator-...
Hey, I have a xsoar instance hosted by PA (saas access) and today none of my containers seems to work. Any script run gives the following message Error from Scripts is : Script failed to run: "docker images demisto/python3:3.10.13.86272" with error "exit status 125" and output "Error: cannot re-exec process to join the existing user namespace H...
Hi Team, The standard customer, where there is missing context in indicator preview. I executed an NVD reputation command on CVE via a custom script (CV Reputation).The results are in the attached playground data, but they're not reflected in the indicator sample. Please refer the screenshot. What has been done: Non- working:Integration: Nis...
Hello Team, How to get the eval community license for XSOAR?
Hello everyone, I'm try to make a usecase where it will be possible to send email to the XSOAR and instead of creating new incident the email content will be delivered to already open incident based on Incident id or UID with addEntitlement.after creating an entitlement I send email to the XSOAR (I got ews V2 setup and working) with the entitle...
I would like your kind support in telling me if there is a procedure to pause task flows by schedules. For example, I want a playbooks to have 2 flows: The first flow I want to be activated from Monday to Friday and the second flow I want to be activated only on Saturdays and Sundays.
Can I remove/hide "Add Child Incidents" in the incidents actions?
Hello, I just registered for the XSOAR community edition and I haven't received the link to download yet. How long does it take to receive and how can I log a request to ask for it to be resent. Thanks.
I created "firstmodificationdate" field in short text type to apply all the incidents. the purpose of that, I want to store the when the incident was modified at first time. first medication of each incident date will be stored in the "firstmodificationdate" field for all type of incidents. Is there any possible to do that in xsoar?
Is it possible to migration xsoar from standalone to multi tenant ? I have try to migration from xsoar standalone to multi tenant used method "Migrate Data to Another Server for Multi-Tenant" ref. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Administrator-Guide/Migrate-Data-to-Another-Server-for-Multi-TenantBut found ...
Hi Team, The standard customer has a query regarding deleting an incident on XSOAR. 1. In terms of performance usage when delete an incident or multiple selected incidents on the XSOAR console (Incidents page) and when delete an incident or multiple selected incidents through API call on endpoint POST /incident/batchDelete. The question is, wh...
