How do I get network traffic data in XSOAR from the SIEM ingestions?

We have to Generate a report that presents the network traffic data in XSOAR obtained from our SIEM. We would appreciate the guidance on the calculation process and the essential aspects we should include in the report.

Thank you
Cortex XSOAR

getting ERROR while fetching username from the email header

Hi,

I am using this below-attached snapshot configuration to get the username from the email header. while running the playbook , it's capturing the output in the context data but also giving the ERROR:

Execution paused, waiting for manual input 

Cortex XSOAR Deployment

I want to ask for the Cortex XSOAR installation which is a free trial, can it only be installed on premise or can it be done on a cloud basis? because after I requested a free trial for cortex XSOAR they directed it to install on premise

Sleep task bugged when XSOAR is restarted

Hello,

We are using long sleeps in playbooks, when the XSOAR is restarted these sleeps get stucked and never finish. We have to go by one by one finishing the tasks manually. How can this be avoid? 

XSOAR muti-site (DC,DR) design best practice

Dears All,

Kindly we need your support to provide us with best practices for muti-site high availability architecture (DC, DR)

Incident Layout dynamic section as input

Hello!
I would like to ask you how to implement a way to define the input values on the Incident Layout.

For example, I would need it in a case where I have a sub playbook and I want to give a value to one of its mandatory arguments without having to

A doubt with ElasticSearch Integration and EQL searches (es-eql-search)

Hi everyone,

I'm currently working on how to make some EQL queries to my Elastic Instance from Cortex XSOAR. I'm using ElasticSearch integration, specifically the command "es-eql-search" which purposoe, I guess, is to make a EQL query to ElasticSea

AWS Market place Prisma Cloud (PAYG with 15-Day Free Trial)

From the Welcome mail I receive Palo Alto network Support expected is Hub right?

Mapping fields to XSOAR IOCs

I'd appreicate guidance on how to update IOC fields with information extracted from an excuted playbook task. 

My use case centers around updating File Hash IOCs to include file signature metadata information to enable easier cleaning up of IOCs as

Some simple task taking long time to complete, dont know why

Hi Everyone

I have multiple simple playbooks tasks taking over a mins to complete, such as closing ticket, condition select etc, 

We checked the CPU and Memory usage it seems normal,

Any suggestion where I can change why ti taking so long?

Ch