War room: View full content in a new tab. Output in column instead of row

Hello

If we press in the war room output to " View full content in a new tab" then the output is a table - and everything in one row.

Is it possible to get the output in columns?

Even csv is all in one row...

so, instead first row with description, pu

Cortex XQL searches in XSOAR - how to?

Hi, I am trying to integrate more and more XSOAR into my environment.

I would like to be able to do XQL searches on xdr dataset, but I can't find a way to do that.

I have Cortex Data Lake integration, but is seems to cover only logs from firewalls.

Thx

Cortex XDR Halt Playbooks?

So we're utilizing XDR Prevent (not Pro) here. Appears to be all the preparation on PAN's site is carefully equipped towards the Proform, and Github hasn't been exceptionally productive.

I'm contemplating whether anybody has any playbooks or work pro

Timeframe for Script in a widget

How can I get the Timeframe inside a Dashboard into an python script so that I can use it to query splunk for the same timeframe 

I haven't been able to find anything related to this in the documentation. 

Thanks, 

Juan

SplunkPy | Integration test throws error

While testing SplunkPy integration, I am getting the following error.

Error from SplunkPy is : Script failed to run:

Error: Error [[Traceback (most recent call last):

    File "<string>", line 1, in <module>

  ImportError: No module named splunklib.

Cortex xsoar integration with qradar

Hi Team,

can you please help me how to integrate cortex xsoar with ibm qradar . I dont find related documents for this.It would be great if you can share KB article for this.Thanks

Issue Working with Files

Hello everyone,

I am having some trouble working with files in an incident.
I have integrated an API that need a path to upload a file.

This API checks the file extension in the path and as I have seen, file paths in XSOAR incidents are something like

Cortex XDR Prevent playbooks?

Panorama Query Log Fails

Hello all

I run into a failure on Playbook Panorama Query Logs.

The failure is:

"Set vsys for firewall or Device group for Panorama"

This happen on the GeneralPolling Playbook and there at the task RunPollingCommand.

I've defined Device Group and askin