This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.
About Cortex XSOAR Discussions
Cortex XSOAR enables SOC analysts to manage alerts across all sources, standardize processes with playbooks, take action on threat intel, and automate response for any security use case.

Discussions

Start a conversation

About Fetch Incidents interval

Hi All, I am new to Cortex XSOAR. I have one question. lets say we are fetching the incidents for any specific time interval and now considering SOAR recommended fetch limit of 200 Incidents per fetch, there can be situation when we might have more than 200 incidents and in this case we will have backlog of these remaining incidents for next fet...

AChawale by • L0 Member
  • 2669 Views
  • 1 replies
  • 0 Likes

Multiple Checkpoint instance add-host issue

Hi, There we have 2 different CP-FW instance running but in block playbook we are unable to block 1 ip address for 2 CP-FW instance. It gives (unauthorized 401 - session expired) error. In case of single instance deployment same playbook works with no error.

Resolved! Is a query result a lit or or a dict?

Hey there, Running a query - current_unique_IDs = demisto.executeCommand("query", {"query":get_current_uniqueIDs_query_SQL, "using-brand":"Generic SQL"}) when i execute - demisto.results(type(current_unique_IDs) I get But when i try list functions it says it is a dict. but when i try to do dict functions I get a non hashable error. I want to ...

Tripper_0-1651598898339.png
Tripper_0-1651599849700.png
Tripper by • L1 Bithead
  • 5482 Views
  • 6 replies
  • 0 Likes

Resolved! XSOAR disk quota exceeded error

I am getting disk quota exceeded error while running commands both on the playbook and the consolehere is the full error.2022-04-29 06:42:22.4327 error Container exit with error. container name: [demistoserver_pyexec-01aab3da-d09e-4478-84b6-650a5860ddeb-demistopython33.10.4.27798-acc_XXX-30] error: [exit status 126] stderr: [Error: OCI runtime e...

image (1).png

Question from "Dev to Prod" Webinar - restructuring and creating directories for content items

Has there been any consideration into restructuring and creating directories for the various content items vs the current strategy of everything going into a flat list? When you get to a point where there is a lot of content it becomes very burdensome to look at content files within Gitlab **Note: this is a question from our CS Webinar: Dev to...

rtsedaka by • L6 Presenter
  • 1781 Views
  • 1 replies
  • 0 Likes

Integrating Palo Alto XSOAR or leveraged any other API integration with any of the following next-gen firewalls: Checkpoint Smart Log, Fortinet, a

Has anyone tried integrating Palo Alto XSOAR or leveraged any other API integration with any of the following next-gen firewalls: Checkpoint Smart Log, Fortinet, and Cisco firewalls for running automated searches for IOCs such as IP addresses, URLs from Threat Intel sources, etc. in logs? I would appreciate your sharing how you went about it. Th...

JideAj by • L1 Bithead
  • 3910 Views
  • 3 replies
  • 0 Likes

QRadar API get assets query

Does anyone know with QRadar Integration: "qradar-assets-list"This retrieves information such as The above asset (1278) has vulnerabilities and 2 products installed, but it only provides me with a vulnerability count and product IDs.1. How do I query what those products are or what those vulnerabilities are?2. I was exploring using the "https...

jboyd98_1-1651156469974.png
jboyd98 by • L2 Linker
  • 4016 Views
  • 4 replies
  • 0 Likes
  • 1308 Posts
  • 46 Subscriptions
Top Solution Authors
View All
Top Liked Posts
View All
Top Liked Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks