Cortex XSOAR Discussions

Resolved! Using SearchIncidentsV2 or GetIncidentsByQuery in automations

Hi,

First of all, we are using a lot of automations searching for incidents using queries often with more than 100 results.

The scripts line looks like this:

res = demisto.executeCommand('SearchIncidentsV2', {'query': query, 'limit': 5000})[0].get(

...

Resolved! No output in action

In the "cybereason-get-sensor-id" task we manage to retrieve the sensor id for a given machine, but only in the result tab.

In fact, it looks like the integration doesn't return an output result, so we're not able to use the sensorId as an input fu

...

Hi, I want to use Exabeam integration in XSOAR but not to fetch incidents (incident responder) as it is currently set in fetch-incidents command, that is in fetch_incidents function.

The plan would be to fetch with get-notable-users command, which pr

...

Resolved! Limit of Support Licence

Hello,

I am just wondering if we are losing XSOAR Support after installing several custom Docker images which are not in the following list, on our XSOAR* Environment :
==> https://hub.docker.com/r/demisto

* : OnPremise - BarMetal XSOAR

Thanks i

...

How to run and or use HelloWorld Integration?

Hello all,

Fresh install of XSOAR onto Ubuntu, all went well. I a trying to run the HelloWorld integration but I keep getting the error:

Failed to execute test-module command. Error: Verify that the server URL parameter is correct and that you ha

...

Resolved! Custom Data Storage

Hello,

Is there a way to store custom Data elsewhere than in incidents ? I suceeded in "Lists" but it appears than maximum list size is 209715 characters ==> https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.9/Cortex-XSOAR-Administrator-Gui

...

Resolved! Widget expected data Format

Hello,

I was not able to find in XSoar Documentation, the "formats" which are expected for all Widget Types :
- Data Table
- Graph
- Text Input
- Select
- List
- Map
- Date Picker
- File Picker

Do you know them ?

Thanks in advance for your reply and be

...

How can i change type (shorttext, multiselect) of incident field?

Hi all,

Earlier, I created a field called propagation_x and posted it to the main account. The type of this field is shorttext. I want to change the type of this field to multiselect. In YML file shows multiselect, but XSOAR shows as shorttext. How c

...

XSOAR integration fetching incidents past the set time.

We're only running one instance of the integration and we've set the first fetch timestamp to be 3 days.
When we run the integration, initially it only fetches incidents in the past three days and then after a while it starts fetching incidents as old

...

Resolved! custom automation issue

Hi ,
I created a custom automation that creates a pdf using fpdf.
Is there anyway to upload the file to the war room so it will have an entryID ?

Moving a file

Hello,

Anyone know how I can run an automation in the playground, to save a string of text into a file locally on the system?

Resolved! Jobs never ending - is running forever when Playbook is done...

Hello all

We are using Cortex XSOAR Version Version 6.0.0; Build 79522 and having problems with Jobs.

I've created a Job, which calls a playbook. this playbook is done withing 1 minute - but the Jobs-Status is always on "running".

The playbook has a

...

Xsoar unable to install in Client machine

Dear Team,

We are doing xsoar server installation 6.11 in Linux machine. But while running the package, we are unable to configure. We are getting many errors. Kindly help us on the same.

Thanks & Regards,

Priya M

XSOAR Integration with Cisco IronPort Email API - HTTP/1.0 500 The application raised an exception

Hi, I'm integrating XSOAR with Cisco Ironport, after entering enough information, I get an error like above. Has anyone encountered this case?

Resolved! Playbooks seems never end

Hello everyone

Recently I am developing playbooks for the management of possible security incidents.

Something that catches my attention is that, in case of errors throughout the playbook, I have established that the case is closed through the "C

...

Discussions