Cortex XSOAR Discussions

War Room showing limited outputs

Hello, We are executing a long playbook. This playbook started to work incorrectly. To check what was happening, we looked inside the War Room, but it only showed a limited number of outputs. In order to check more outputs, we had to scroll up inside the War Room, however, it took too long to load just a couple of new outputs. How can we obtain ...

ElasticSearch Integration(insert/select/delete)

Hello, I have some questions about ElasticSearch Intergration.This integration imports only events as incidents?If I want to execute (run) insert/select/delete commands in ElasticSearch should I update the integration? Or did you have any other way to do it that could be a better idea? Automate or update the integration duplicated?Thanks

Delete List using automation/command?

Hi All, I wanted to delete a list using a playbook tasks, but I dont find any automation that can achieve it. It only have createList, and remove data from List May I know any workaround for it? Regards,Jia Kai

Resolved! ParseExcel automation issue

hello,using XSOAR I wanted to parse an excel from an e-mail and insert the information into a table. I created a Grid field by inserting it inside the incident, used ParseExcel inside a playbook setting as "Mapping" inside the automation to identify the output and then inserted it inside the created Grid field as you can see from the image. Unf...

Upgrade issue with the description of incident field

Hi community. We have issue with the upgrade scenario of the description (tooltip) of the incident field for the Dataminr Pulse integration for XSOAR. We have updated the description of the incident fields: Dataminr Pulse Post Link and Dataminr Pulse Expand Alert URL. After upgrading pack from 1.0.5 to 1.0.6, we are not able to see the tool...

Resolved! How to access incidents a user is participant of

Roles field is a good way to restrict access to incidents. but in my case I just want to assign a group of people to manage an incident and not restrict the incidents to other people. In order to do that I am adding users to the incident as a team member. Team member is used mainly because it can add team members by tagging '@' Once these use...

Resolved! Create clean Notes in the layout

Hello, We'd like to create Notes in the layout. We can use the option "Mark results as note", but it shows the command executed. We'd like to show a clean note, nothing else.

"taskComplete isAutoRun=True" not working

Hello, We are using a playbook to run again tasks which are already running. Just to reset the task. However, when the command "taskComplete isAutoRun=True" is used, it doesn't run again. How can we avoid this? Is there another option?

XSOAR - Microsoft Integrations - Authentication - Office365 Mail not authenticating

Hi all! Thanks a lot in advanced for your help. We are trying to connect to a mail server using the newest release of the Microsoft Exchange Integration. We've followed the instructions detailed here: https://xsoar.pan.dev/docs/reference/articles/microsoft-integrations---authentication#self-deployed-application Both, using the Cortex XSOAR...

Resolved! Splunk Integration

Hi, I have been trying to integrate Splunk Enterprise with xsoar and I keep getting this error message with url: /services/auth/login (Caused by SSLError(SSLError(1, '[SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1007)'))) ] (2604) (2603) how can I fix this and get the integration to work. pls I need help

Fetching fields in issuejson

I have added a custom field in Jira. I am trying to print the information in jira by fetching through XSOAR. I am using this command {"fields":{"customfield_11503":{"value":"${incident.techniqueid}"}}} where technique id is getting fetched in XSOAR, I can see in the input field after executing the task, but the same is not getting printed in Ji...

Resolved! Add a new field in Jira XSOAR

Hi All, I have integrated Jira in XSOAR, while editing a Jira issue I can see following fields: I want to update resolution field of Jira from XSOAR. I tried using {"fields":{"resolution":{"value": "SIEM - Benign Positive"}}} in issuejson under jira-edit-issue. Can anyone please assist how can I achieve this. Thank You.

Add Assignee Name through XSOAR

Hi, I have integrated Jira in XSOAR, I am creating a jira ticket with XSOAR using jira-create-issue automation. I want to add assignee name through XSOAR, I tried various combinations like username of jira, email id, etc in assignee id and assignee field in XSOAR, but assignee field is not getting updated in Jira. I have tried using issuejson co...

Proofpoint Threat Response XSOAR integration Block URL, Block Domain, Block IP lists?

Hello, we successfully have integrated Proofpoint Threat Response Logs into our XSOAR instance. One of the problems we noticed right away is that it seems like its only a one way API flow, as in we cannot send any commands from XSOAR back to Proofpoint Threat Response. For example, with the integration we created a layout with certain button scr...

XSOAR content pack update error

Hi community, I'm running a XSOAR CE Edition (Version 6.11.0 Build 300044), which is weirdly not able to download content pack updates. I receive the following error message:

Discussions

War Room showing limited outputs

ElasticSearch Integration(insert/select/delete)