Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Resolved! setting multiple values in subkeys

Hi, I have a seemingly simple task which i can't figure out how to handle. I want to import a csv file in the context, having column names as the subkeys. And then I want to get rid off some excessive subkeys/columns.My steps are:1. upload a file from file share using smb-download - SUCCESS2. Import file in the context keys using ParseCSV automa...

Antanas by • L2 Linker
  • 4895 Views
  • 3 replies
  • 0 Likes

About Fetch Incidents interval

Hi All, I am new to Cortex XSOAR. I have one question. lets say we are fetching the incidents for any specific time interval and now considering SOAR recommended fetch limit of 200 Incidents per fetch, there can be situation when we might have more than 200 incidents and in this case we will have backlog of these remaining incidents for next fet...

AChawale by • L0 Member
  • 2702 Views
  • 1 replies
  • 0 Likes

Multiple Checkpoint instance add-host issue

Hi, There we have 2 different CP-FW instance running but in block playbook we are unable to block 1 ip address for 2 CP-FW instance. It gives (unauthorized 401 - session expired) error. In case of single instance deployment same playbook works with no error.

Resolved! Is a query result a lit or or a dict?

Hey there, Running a query - current_unique_IDs = demisto.executeCommand("query", {"query":get_current_uniqueIDs_query_SQL, "using-brand":"Generic SQL"}) when i execute - demisto.results(type(current_unique_IDs) I get But when i try list functions it says it is a dict. but when i try to do dict functions I get a non hashable error. I want to ...

Tripper_0-1651598898339.png
Tripper_0-1651599849700.png
Tripper by • L1 Bithead
  • 5608 Views
  • 6 replies
  • 0 Likes

Resolved! XSOAR disk quota exceeded error

I am getting disk quota exceeded error while running commands both on the playbook and the consolehere is the full error.2022-04-29 06:42:22.4327 error Container exit with error. container name: [demistoserver_pyexec-01aab3da-d09e-4478-84b6-650a5860ddeb-demistopython33.10.4.27798-acc_XXX-30] error: [exit status 126] stderr: [Error: OCI runtime e...

image (1).png

Question from "Dev to Prod" Webinar - restructuring and creating directories for content items

Has there been any consideration into restructuring and creating directories for the various content items vs the current strategy of everything going into a flat list? When you get to a point where there is a lot of content it becomes very burdensome to look at content files within Gitlab **Note: this is a question from our CS Webinar: Dev to...

rtsedaka by • L6 Presenter
  • 1809 Views
  • 1 replies
  • 0 Likes
  • 1310 Posts
  • 46 Subscriptions
Top Solution Authors