Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

How to read file from the pandas FileExcel?

I need to create some report and I am using pandas module for that but unable to read the file from my local rdp desktop. Note: I am using xsoar from web Interface. I try to use with "\\" to avoid escape sequence mistake. It is unable to read the file even the path is correct. Can anyone help me with that. I just started my xsoar journey. ***...

Resolved! Using SearchIncidentsV2 or GetIncidentsByQuery in automations

Hi, First of all, we are using a lot of automations searching for incidents using queries often with more than 100 results. The scripts line looks like this: res = demisto.executeCommand('SearchIncidentsV2', {'query': query, 'limit': 5000})[0].get('Contents') It seems however the "Content" only contains 100 results even though it shows the rig...

01.jpg
02.jpg
03.jpg
04.jpg
sdes by L0 Member
  • 3955 Views
  • 2 replies
  • 0 Likes

Resolved! No output in action

In the "cybereason-get-sensor-id" task we manage to retrieve the sensor id for a given machine, but only in the result tab. In fact, it looks like the integration doesn't return an output result, so we're not able to use the sensorId as an input further into the playbook. Is there any workaround to retrieve the actual result of this ta...

Aurelien19_0-1690534478128.png
Aurelien19_1-1690534544985.png

Custom Fetch Incidents

Hi, I want to use Exabeam integration in XSOAR but not to fetch incidents (incident responder) as it is currently set in fetch-incidents command, that is in fetch_incidents function. The plan would be to fetch with get-notable-users command, which produces this result (context-data), when using '!exabeam-get-notable-users time_period="1 month" l...

MMagdic by L2 Linker
  • 1672 Views
  • 1 replies
  • 0 Likes

Resolved! Limit of Support Licence

Hello, I am just wondering if we are losing XSOAR Support after installing several custom Docker images which are not in the following list, on our XSOAR* Environment :==> https://hub.docker.com/r/demisto * : OnPremise - BarMetal XSOAR Thanks in advance for your reply and Best Regards,Thomas Nicolas

How to run and or use HelloWorld Integration?

Hello all, Fresh install of XSOAR onto Ubuntu, all went well. I a trying to run the HelloWorld integration but I keep getting the error: Failed to execute test-module command. Error: Verify that the server URL parameter is correct and that you have access to the server from your host. Error Type: <requests.exceptions.ConnectionError> E...

GWynn by L3 Networker
  • 2499 Views
  • 3 replies
  • 0 Likes

Resolved! Custom Data Storage

Hello, Is there a way to store custom Data elsewhere than in incidents ? I suceeded in "Lists" but it appears than maximum list size is 209715 characters ==> https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.9/Cortex-XSOAR-Administrator-Guide/ListsDoes XSoar has a functionnality like Data Tables, or whatever wich could allow us to s...

Resolved! Widget expected data Format

Hello, I was not able to find in XSoar Documentation, the "formats" which are expected for all Widget Types :- Data Table- Graph- Text Input- Select- List- Map- Date Picker- File Picker Do you know them ? Thanks in advance for your reply and best regards,Thomas Nicolas

XSOAR integration fetching incidents past the set time.

We're only running one instance of the integration and we've set the first fetch timestamp to be 3 days.When we run the integration, initially it only fetches incidents in the past three days and then after a while it starts fetching incidents as old as 3 years ago.Has anyone observed this issue and if so, what could be the issue here?

Moving a file

Hello, Anyone know how I can run an automation in the playground, to save a string of text into a file locally on the system?

kkaiquan by L0 Member
  • 1096 Views
  • 1 replies
  • 0 Likes

Resolved! Jobs never ending - is running forever when Playbook is done...

Hello all We are using Cortex XSOAR Version Version 6.0.0; Build 79522 and having problems with Jobs.I've created a Job, which calls a playbook. this playbook is done withing 1 minute - but the Jobs-Status is always on "running". The playbook has a "Done" Section Header at the end. Do I have to add some Tags or anything, that Jobs sees, that th...

  • 1298 Posts
  • 45 Subscriptions