Resolved! Sumo Logic integration error: This operation is not allowed for your account type

Hi all,

the integration with Sumo Logic failed to work and now I get the error:

2022-04-22 12:41:51.3031 error Could not fetch incidents from SumoLogic instance : SumoLogic_instance_1 [error 'Script failed to run: Status: 403
ID: WOXBU-A2PLF-BUHRT
Code

Resolved! Error while closing incident

Hi!

we are testing XSOAR on a local VM. We have created several incidents via an integration with our Threat intel solution.

When we are going to close an incident.. it doesn't close! 

We get no error from the UI. If we go to the VM console, from /var/l

Resolved! Automation "Remove From List" error

Hi,

One of my playbook includes a removefromlist automation but sometimes this step gives the error below, if this step is rerun without any change everything is ok. Do you have any idea why it needs to be rerun sometimes and any ideas about this err

Resolved! Do content pack updates require downtime

I need to update my QRadar Content Pack which also requires X dependencies be upgraded.

What is best practice for content package upgrades?
Is it as simple as installing from marketplace or do we have to run a sync after or cycle demisto after?

Other th

Resolved! Blueliv integration error

Hi!

we are testing XSOAR capacities. For testing purposes, we are creating an integration with our intel solution, Blueliv:

https://xsoar.pan.dev/docs/reference/integrations/blueliv-threat-compass

When fetching it returns an error. From the mapping ed

Resolved! Do I have to set Server Configurations per tenant?

Example:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-5/cortex-xsoar-admin/docker/docker-hardening-guide/run-docker-with-non-root-internal-users#idb5fe7d70-f021-4270-a328-7439d5574723

I set this on the main account and sync'd all accounts.

H

Resolved! error 'Missing required field: 'owner' when uploading / creating incident via json

Trying to export a ticket from PROD into DEV.

To test I exported a ticket in DEV as a json using this in the playground.

!azure-sentinel-get-incident-by-id incident_id="c5dc30e5-6981-4cb0-9895-66967fc3f2e9" raw-response="true"
(saved as json)

Then n DEV