Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Resolved! Custom Data Storage

Hello, Is there a way to store custom Data elsewhere than in incidents ? I suceeded in "Lists" but it appears than maximum list size is 209715 characters ==> https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.9/Cortex-XSOAR-Administrator-Guide/ListsDoes XSoar has a functionnality like Data Tables, or whatever wich could allow us to s...

Resolved! Widget expected data Format

Hello, I was not able to find in XSoar Documentation, the "formats" which are expected for all Widget Types :- Data Table- Graph- Text Input- Select- List- Map- Date Picker- File Picker Do you know them ? Thanks in advance for your reply and best regards,Thomas Nicolas

XSOAR integration fetching incidents past the set time.

We're only running one instance of the integration and we've set the first fetch timestamp to be 3 days.When we run the integration, initially it only fetches incidents in the past three days and then after a while it starts fetching incidents as old as 3 years ago.Has anyone observed this issue and if so, what could be the issue here?

Moving a file

Hello, Anyone know how I can run an automation in the playground, to save a string of text into a file locally on the system?

kkaiquan by L0 Member
  • 1175 Views
  • 1 replies
  • 0 Likes

Resolved! Jobs never ending - is running forever when Playbook is done...

Hello all We are using Cortex XSOAR Version Version 6.0.0; Build 79522 and having problems with Jobs.I've created a Job, which calls a playbook. this playbook is done withing 1 minute - but the Jobs-Status is always on "running". The playbook has a "Done" Section Header at the end. Do I have to add some Tags or anything, that Jobs sees, that th...

Resolved! Playbooks seems never end

Hello everyone Recently I am developing playbooks for the management of possible security incidents. Something that catches my attention is that, in case of errors throughout the playbook, I have established that the case is closed through the "Close Investigation (builtin)" automation. Although on other occasions, the question I want to ask...

War Room Table to Layout view

Hi, I am building the playbook, where I have one task that is searching for incidents using the query as in:!SearchIncidentsV2 query="type:FireEye NX Alert and fireeyenxalertvictimip:11.11.11.11 or 134.122.90.162"With a help of community members I was able to insert the variable IP which contains a list of IP addresses to search for (above these...

MMagdic_0-1689838826342.png
MMagdic by L2 Linker
  • 2235 Views
  • 1 replies
  • 0 Likes

splunk notable hash

Hello, i get some problems during setup my splunk to xsoar: The problem i get is xsoar take the notable event hash filed like it was a file hash and i didn't want it in my playbook. Some of you has already face this issue ? do you have resolved it ? Thanks Cortex XSOAR

  • 1307 Posts
  • 46 Subscriptions