Is there a xsoar conditional that can say if any condition is true, continue on the path for that true condition?
Hello Team, I have a case that must integrate indicator from TIM Cortex XSOAR to SIEM 3rd Party like Elastic. Is there any documentation about how to integrate indicator from TIM for Elastic? Because when I search in documentation from Cortex XSOAR there is a playbook to integrate indicator TIM just for SIEM QRadar & Arcsight. Thank you
Hello everyone, I signed up for the XSOAR Community Edition a few days ago and also showed interest in Cortex XDR for lab use. Haven’t received any emails or access yet — just got the usual “someone will be in touch” message. Is this still a thing for individuals who want to lab and learn? Just trying to get hands-on and mess around with it ...
Hello I was doing a transformer automation and I wanted to execute a command inside it and it works perfectly when I run it on the playground, however when I use it as a transformer it gives me the error Missing invoking entry (7) does anyone know how to execute commands in transformer automations? Is it possible? I'm just trying to execute a co...
I am trying to update XSOAR Incidents via API, but am having issues with the Optimistic lock and incident versions etc. I can create incidents via API call and can also get the information from incidents via API. When I create a new incident in our Dev env, the version for the incident is typically showing as "-1" I have some incidents that sho...
Hi everyone, I'm currently exploring ways to enhance the security of our Cortex XSOAR v8 environment (deployed on-premise) by implementing an OTP / 2FA / MFA authentication mechanism for the login process. Here are the key requirements: The solution must be on-premise, allowing full control over the authentication process. It should ideally ...
Hi, Iam trying to figure out how to perform the following: Export a playbook, overwrite some of its tasks (send-mail Exchange) and upload the playbook back to XSOAR. I found in Docu an API for playbook import as yaml but no export API. If Anyone could point me to any direction here, thank you very much! XSOAR Version is 6.12.0
Hi Team, I have a customer who wants to know whether the xsoar 6.x version is compatible to vsphere version 8. Please assist.
what version of SSL and TLS version is used here? our AD is listening to TLS and not SSL. but only ssl can work and TLS get these errors.
XSOAR 6.13 with expired Elastic Search Enterprise license is not working properly. Can I downgrade to the Elastic Search basic license until it get purchased to restore the XSOAR operations? After purchased the Enterprise license, can I upgrade again?
Dear Experts, I have configured Cortex XSOAR to ingest cases/alerts, but for certain conditions, I want to prevent these from becoming incidents or triggering playbooks. I’ve created a script to drop alerts that meet specific criteria. However, I need to maintain a record of which alerts were dropped and, if possible, send notifications about th...
hello community! I hope you are doing well. I'm here to ask a question that PAN support didn't know how to deal with and maybe some of you have already gone through the same thing. It was Saturday morning and xsoar and its functions were completely frozen, absolutely nothing was running. As XSOAR administrator, this had already happened so I res...
Hello, I'm currently implementing Cortex XSOAR On-Prem 8.8. I'm fairly new to this product. I have deployed the VM and cluster configuration completed successfully. I was able access GUI and do the basic configurations. After I updated the version to 8.8.x, I'm getting "503 Service Temporarily Unavailable" How can I fix this issue ?
Can we integrate two instances of the SIEM, given that both IP addresses belong to the same SIEM but are associated with load balancer IPs? However, if we integrate both instances, there is a slight chance of data duplication. What would be the best approach to integrate with the load balancer IPs while avoiding any duplication? Cortex XSOAR
Hi Everyone, I am enriching domain with domain command of whois but i got issue if any one of domain has no data at their server side for example [Domain1,Domain2] whois will return error if any one of domain data is missing. I just want if no data for one domain just skip it and return ,me remaining Cortex XSOAR #whois #integrations
