Uploading report via demisto api post request

Hello everyone,

I am trying to upload json file to create report. Despite I tried tons of way I couldn't send the body properly. demisto-api-post request need multipart/form-data content type. Is there any way to send raw json properly?

Here is m

Paint markdown table cells or rows

Hello,

We use markdown tables to show the analysts' incident data. We use them for manual tasks in details as in layouts. We'd like to paint those cells where the data shown is critical. For example, on a markdown table where some hashes are detonate

XSOAR Threat intel IOC Ingestion to Splunk

Hi,

We have created EDL query to ingest IOC to the SPLUNK from XSOAR Threat intel management Platform.

We have to know that Refresh List will work  and how to get all IOC via EDL query from XSAOR

Kindly share any best practice any one implement

query(group) indicators by domain name

If I have a tenant/account that has incidents.

some of those incidents have indicators / entities tied to abc.com or xyz.com

Is there a way to query for, show me all the incidents that have hostnames or account names that end in abc.com?

Wasn't having l

Move War Room Entries section

Hi all!
I want to move this section to a different tab in the layout. How do I do that?

I've tried using the War Room Entries section to the tab where I wanted it to be, but the filter 'URL Enrichment' is not listed. Any tips?

Thanks!

parse error: " in non-quoted-field on list [phishing-inprocessHashList]

Hi, 

I encountered a parsing error while running the phishing playbook with the previously reported email. sharing the steps and input data for better understanding of this issue.

How do I get network traffic data in XSOAR from the SIEM ingestions?

We have to Generate a report that presents the network traffic data in XSOAR obtained from our SIEM. We would appreciate the guidance on the calculation process and the essential aspects we should include in the report.

Thank you
Cortex XSOAR

getting ERROR while fetching username from the email header

Hi,

I am using this below-attached snapshot configuration to get the username from the email header. while running the playbook , it's capturing the output in the context data but also giving the ERROR:

Execution paused, waiting for manual input 

Cortex XSOAR Deployment

I want to ask for the Cortex XSOAR installation which is a free trial, can it only be installed on premise or can it be done on a cloud basis? because after I requested a free trial for cortex XSOAR they directed it to install on premise

Sleep task bugged when XSOAR is restarted

Hello,

We are using long sleeps in playbooks, when the XSOAR is restarted these sleeps get stucked and never finish. We have to go by one by one finishing the tasks manually. How can this be avoid? 

XSOAR muti-site (DC,DR) design best practice

Dears All,

Kindly we need your support to provide us with best practices for muti-site high availability architecture (DC, DR)