Owner field default value

In the new Incident Creation Form in Cortex XSOAR. Is it possible to change the default value of the "Owner" field ? Ideally to NA (No Owner Assigned)?

Incident Parent-Child Relationship

I'm looking to establish a hierarchical relationship for linking incidents in XSOAR, specifically a parent-child structure. Currently, the platform allows for linking incidents without hierarchy and creating child incidents under a parent ticket. How

XSOAR Reports and Count Problems

Hi,

We create two different queries by changing the date range in the reports. These two queries show a different number of incidents for the same day (Jun 24).

We tried various queries in the query field. The result did not change both with and wi

Widget error when Report is scheduled

Hello,

I created a simple widget using Python. The code fetches a list from XSOAR, extracts a number, and the widget displays that number. Nothing more.

The widget works perfectly when viewed in the report interface or when executed in the playground

Install Docker Images In XSOAR

Hi Everyone, I need to run phishing model and for that I need demisto/ml docker image. I intsalled machine learning content pack but still not get or see this docker image thats why I'm unable to run that model. I also ready info from here but still

XSOAR hosting docker container problem (exit status 125)

Hey,

I have a xsoar instance hosted by PA (saas access) and today none of my containers seems to work. Any script run gives the following message

Missing context in indicator preview. I executed an NVD reputation command on CVE via a custom script.

Customize System Emails

I see there is documentation on customizing system emails: https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Customize-System-Emails

I'm seeing placeholders such as {{ .username}} and  {{ .invName}}. Where i

XSOAR Community Eval

Hello Team, 

How to get the eval community license for XSOAR?

Creating usecase with addEntitlement

Hello everyone, I'm try to make a usecase where it will be possible to send email to the XSOAR and instead of creating new incident the email content will be delivered to already open incident based on Incident id or UID with addEntitlement.

after cre

Creation of flows and pause by weekday schedules

I would like your kind support in telling me if there is a procedure to pause task flows by schedules. For example, I want a playbooks to have 2 flows:

The first flow I want to be activated from Monday to Friday and the second flow I want to be activ

Is is possible to remove/hide incident actions?

Can I remove/hide "Add Child Incidents" in the incidents actions?

Registered for community edition, haven't received download link yet.

Hello,

I just registered for the XSOAR community edition and I haven't received the link to download yet. How long does it take to receive and how can I log a request to ask for it to be resent.

Thanks.

Need to Know when the incident was modified first time

1. I created "firstmodificationdate" field in short text type to apply all the incidents.
2. the purpose of that, I want to store the when the incident was modified at first time.
3. first medication of each incident date will be stored in the "firstmodificatio

Can we migration xsoar from standalone to multi tenant

Is it possible to migration xsoar from standalone to multi tenant ?

I have try to migration from xsoar standalone to multi tenant used method "Migrate Data to Another Server for Multi-Tenant" ref.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSO