Hi all, I want to assign all incidents that are Linkedincident to a single owner. What should I do for this? I tried to assign with top-user,machine-learning parameters. But that didn't work.
We want to monitor server performance in real time for that we are using default dashboard named "System Health". But in that we are not able to monitor disk.Our server is on Prem and its version of xsoar is 6.12. Please assist quickly.
I'm currently using the free edition of Cortex XSOAR and have encountered a couple of issues related to reports: Missing "Add New Report" Button: According to the documentation and tutorials I've followed, there should be an "Add Report" button in the reports interface. However, in my instance, this button is missing. Is this a limitation of t...
Hi team, I wanted to see if there is any way to troubleshoot or view debug output/logs in XSOAR 8 on-prem? I have not had much luck getting the OVA version fo deploy successfully, let alone completing the install and accessing a functional UI. I am persistently stuck at an NGINX screen trying to access the FQDN, but have no way to look at logs t...
Say DEV > PROD is enabled, and I need to add a user to UGBAC in PROD. Would that be possible directly in XSOAR? *This question was asked during our XSOAR CS webinar: Cortex XSOAR Customer Success Webinar: On-Prem v6 Migration to v8 SaaS
Do we need additional proxy rules for MS Teams integration? *This question was asked during our XSOAR CS webinar: Cortex XSOAR Customer Success Webinar: On-Prem v6 Migration to v8 SaaS
Hi Team, I'm trying to zip a file using ZipFile Automation as a task in the playbook and after it has been zipped use the ZIP file EntryID to be sent attached in an email, I'm getting this error: 'Unable to read file with id b4841215-d627-4c36-9cb6-243199452aaf', ValueError('failed to get artifact file path, invalid file (52)\n' ZipFile Ta...
I recently got news that crowdstrike is going to upgrade api version so what needs to do at xsoar side in terms of integration. According to my info we just need to update the pack or what else Cortex XSOAR
Hello Live Comm, I have created a new XSOAR Server with a different OS and have begun migrating the data. I need to migrate the instances and we don't have records of the original API keys. Is there a way to access and view the API keys configured on the platform? I need to migrate all of them is there a way to do this? Many thanks, M Sysec Co...
Hello all, I am running a Use-Case that requires me to poll the XDR Tenant for all alerts. These include Alerts that are found in an XDR Incident and Independent Alerts that are not found in an incident. For example a Low Severity alert from a BIOC Analytics Source that has not opened or should I say referenced in an incident. These Independent ...
Hi everyone What is the best way to create a PDF within a Playboook? What are you all using? Data format doesn't matter but some customisation about the pdf format would be nice. BR Michael
Hi, I'm trying to get XSOAR community edition. I've filled in all the details for "Start your XSOAR free trial" and clicked the get it now button, then nothing happens. Have tried Firefox and Chrome. Any ideas?
I'm trying to run an automation every hour which checks for Warroom entries and executes certain code in the automation. This automation should only run and check on the active tickets. The automation itself works, but I still need to execute it with a command in the Warroom at the moment. I've created a job that runs every hour, but I can't see...
Hello, I want to automatically import incidents that occur in XDR as incidents into XSOAR. The integration is successful, but I cannot view the occurring incidents in xsoar and I get the following error. Error: Script failed to run:Error: [Traceback (most recent call last): File "<string>", line 6067, in <module>File "<string&...
Hi, I want to be able to close an incident when all the linked incidents (child incidents) are closed. Is there a way to achieve this without having to run a post processing script for each linked incident? Post processing scripts introduce a race condition when two automations check each other out for status at the same time.
