Cortex XSOAR Discussions

401 Error When using Proofpoint Protection Server v2

Hello LiveComm,

I am trying to establish the Proofpoint Protection Server v2 integration on my XSOAR to use the SmartSearch and other cool features. I am doing this for a supported pphosted (POD) version and have created API credentials for this and

Issues with openpyxl: "openpyxl does not support file format" when processing valid Excel files from War Room

Hi everyone,

I'm encountering an issue with an automation script in XSOAR that uses openpyxl to insert an image into an Excel file. Even though the Excel file I'm uploading is valid (I’ve tested it by downloading it and opening it in Excel—it opens

Generic Polling > verify you have proper integration enabled to support it

Hello,

There is a place where I need to use generic polling but I can't solve this error.

My script is as follows. where could be the problem here?

XSOAR Prod Is Not Installing Updates From Dev

I have two xsoar tenant one is dev and other is prod. on prod i have main tenant and tms tenant. i pushed content from dev to repo and from main on prod side get the content from git. i saw push is fine and commit is succesful when push from dev side

Special characters are replaced by Unicode or completely wiped out of text field.

Creating tickets with summary that contains special characters into Archer (Dev & Prod) through XSOAR playbook & API calls is replacing special characters either by Unicode (\u003) or completely being wiped out of text field.

A bug was identified b

Rasterize URL returns an empty png

Hi guys,

Currently working on a Brand Abuse response playbook and when trying to take a screenshot for retrieving evidences it returns an empty, white png.

My config of the instance is as follows:

I tried, both Rasterize modes, Headless CLI and Web

XSOAR 8 cloud incident retention policy query

Hi Team,

The standard XSOAR customer, wants to know how the incident retention policy works on V8 cloud instance.

Data retention policy:
1. Is the default retention period is 6 months (180 days)? 

Yes , the default retention period is 6 months (18

Playbook Showing Keep Running & Running

Dear All,

I am facing really annoying issue. I have setup integration(mapper,type) and playbook hit very well on incident but the problem is the playbook showing running and running for all incidents and not run. I try to pause and resume but it also

Is there a way to check all scheduled entries in XSOAR?

Is there a way to check all scheduled entries regardless of the incident you're in? I've been using ShowScheduledEntries in the playground to test an automation (let's call it X), but after a week, when using the ShowScheduledEntries command it retur

How to "empty" a field value in XSOAR, or remove the value?

Tried to remove a value of a field to "empty" 

For example "setIncident fieldname=None and !setIncident fieldname="" 

But that doesn't work, does anyone how how to remove the value? 

CSV Feed Same Indicators

Hi,

I am using CSV Feed integration and a delta triggered Job, that is triggering whenever there is a new item (IP indicator) in CSV feed. The playbook under job is adding only new and modified indicators which have "tag":"pending_ip".

Now, I underst

Engine in cloud - design concept

I have a cloud instance of XSOAR, with set of technologies in cloud and on prem as well, my initial thought is to have an engine for each group, that means two engines, and separate the technologies accordingly, any thought on that and what is challe

How to Delete War Room Entries or Clear War Room

Hello LiveComm,

is there a way to remove an entry from an XSOAR incident ? This is needed for general entries and not just files as files can be deleted with Core API. An example of this can be a comment by an analyst or any textual entry. Perhaps th