Cortex XSOAR Discussions

Resolved! Print Command "The command does not exist or it is disabled"

Hello All, I am having issues with the "Print" command on the XSOAR. I am dealing with the current up to date version (6.5.0) and this is a persistent error that appears every few days. The following error is received and in no way has the command been disabled or removed. Thanks in advance. Cortex XSOAR

Playbook construction

I would like to ask the community if perhaps someone has created a playbook that takes in Snort/Suricata alert data. I am looking a creating a automated block process that will compare an IDS alert with a Threat notification from the PAN. If the src_ip, src_port, dst_ip, dst_port and timestamp match and the firewall took no action on the threat....

Resolved! javascript return context key from variable

Hi! I have modified a simple Javascript automation, however i can't seem to put an input value as a context key. In the below sample i declare var Key = args.parent; and in the return statement i try to use this variable as context entry.In reality, I literally get the context set to "Key", regardless on what I specify in the input. It is like ...

Question from Playbook Optimization webinar: Playbook Mata-Data command

Tried the getInvPlaybookMetaData on a couplf of our incidents "Command: !getInvPlaybookMetaData incidentId="104541" minSize="10" (Builtin) No data returned" Can you advise? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Load time

Are these load times expected? I've noticed our load times are pretty rough after some recent updates. ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Global context

what you did in order to make context globally? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Incident history

How can I configure or create a job that gets rid of incidents that are X days old? For example, I don't need to keep incident history for more than 2 days, I want to save space removing them. ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Sub-Playbook outputs

using outputs of subplaybook requires creating custom fields. Or can this be done differently? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Outputs & Sub-Playbooks

What does happen if are there 2 outputs with the same name in a playbook containing more subplaybooks? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Playbook best practices

any best practices for playbook? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Sub-Playbook context keys

How can you access subplaybook context keys? I does not work sometimes to reach the subplaybook-xxx. ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Sub-Playbook quiet mode

Let's say we fix a sub playbook to run in quiet mode cos it's larger than 150KB. Will this affect the main playbook if it is dependent on the subplaybook output. Also will it fix all the older incidents that have already run ? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: Command modification

Is it possible to modify all instances of a command? For instance, if we wanted to change the "Run without a worker" setting on all usages of sleep - is that possible? Or would I need to do it 1-by-1? Or even possible per playbook maybe with multi-select? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in C...

Question from Playbook Optimization webinar: Playbook unassigned

how can we unassigned the playbook? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Question from Playbook Optimization webinar: List lookup

Is a conditional list lookup always considered 'better' in terms of performance compared to loading a list into context or just when the list is very large? ** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR Cortex XSOAR

Discussions

Resolved! Print Command "The command does not exist or it is disabled"

Playbook construction

Resolved! javascript return context key from variable

Question from Playbook Optimization webinar: Playbook Mata-Data command

Question from Playbook Optimization webinar: Load time

Question from Playbook Optimization webinar: Global context

Question from Playbook Optimization webinar: Incident history

Question from Playbook Optimization webinar: Sub-Playbook outputs

Question from Playbook Optimization webinar: Outputs & Sub-Playbooks

Question from Playbook Optimization webinar: Playbook best practices

Question from Playbook Optimization webinar: Sub-Playbook context keys

Question from Playbook Optimization webinar: Sub-Playbook quiet mode

Question from Playbook Optimization webinar: Command modification

Question from Playbook Optimization webinar: Playbook unassigned

Question from Playbook Optimization webinar: List lookup

XSOAR Dev to Prod - Builtin content repository

Still waiting on XSOAR Community Edition + Cortex XDR lab access

Result empty after using json2html script

Do we have XQL query builder feature in XSOAR

Where is the XSAOR 8 CLI Reference?

Re: Fetching CrowdStrike Next-Gen SIEM Alerts into SOAR

Re: Fetching CrowdStrike Next-Gen SIEM Alerts into SOAR

Re: Fetching CrowdStrike Next-Gen SIEM Alerts into SOAR

Re: Cortex XSOAR - Best Practice Optimize Threat Intelligence Management (TIM)

Re: Incident Parent-Child Relationship

Unlock your full community experience!

Resolved! Print Command "The command does not exist or it is disabled"

Resolved! javascript return context key from variable