Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Cortex XSOAR Mobile App Demo

In this demo, we show you how to get up and running with the Cortex XSOAR mobile app and how to use some of the most popular features, including:

 

  • Dashboards
  • Incident summary and several IR capabilities
  • View and complete tasks
  • War Room chat

(view in My Vi
...

afiedler by L4 Transporter
  • 2502 Views
  • 1 replies
  • 0 Likes

Cortex XSOAR 5.5 Required Upgrade

This announcement applies to all customers currently running a version of Cortex XSOAR 5.5 older than (B78409) and that use the API, Splunk App, or SumoLogic to push incidents to XSOAR.

 

We identified an issue in these releases that when pushing incid

...

afiedler by L4 Transporter
  • 2216 Views
  • 1 replies
  • 0 Likes

Resolved! XSOAR CentOS 8 unsupported

We are running a multi tenant xsoar server and I noticed that we are using CentOS 8 Linux which reached End of Life recently. There is also the stream version of CentOS8. For this version the EOL date is May 31st, 2024. I am slightly confused as it s

...

XSOAR Opsgenie integration

How do I get the api token/key for opsgenie to use in xsoar instance. 

Opsgenie settings gives me an api key while saving, but the api throws an incorrect key format error. Also, there is no native inbuilt integration in opsgenie for xsoar to directly

...

Resolved! setting multiple values in subkeys

Hi,

 

I have a seemingly simple task which i can't figure out how to handle. I want to import a csv file in the context, having column names as the subkeys. And then I want to get rid off some excessive subkeys/columns.

My steps are:

1. upload a file fro

...

Antanas by L2 Linker
  • 3107 Views
  • 3 replies
  • 0 Likes

About Fetch Incidents interval

Hi All, I am new to Cortex XSOAR. I have one question. lets say we are fetching the incidents for any specific time interval and now considering SOAR recommended fetch limit of 200 Incidents per fetch, there can be situation when we might have more t

...

AChawale by L0 Member
  • 1997 Views
  • 1 replies
  • 0 Likes

Multiple Checkpoint instance add-host issue

Hi,

 

There we have 2 different CP-FW instance running but in block playbook we are unable to block 1 ip address for 2 CP-FW instance. It gives (unauthorized 401 - session expired) error. In case of single instance deployment same playbook works with n

...

Resolved! Is a query result a lit or or a dict?

Hey there, 

 

Running a query - 

current_unique_IDs = demisto.executeCommand("query", {"query":get_current_uniqueIDs_query_SQL, "using-brand":"Generic SQL"})
 
when i execute - 
demisto.results(type(current_unique_IDs)
 
I get 

 

But when i try list functions

...

Tripper_0-1651598898339.png
Tripper_0-1651599849700.png
Tripper by L1 Bithead
  • 3586 Views
  • 6 replies
  • 0 Likes
  • 1125 Posts
  • 36 Subscriptions
Top Solution Authors
Top Liked Authors