Help with retrieving list of XSOAR items

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Help with retrieving list of XSOAR items

L1 Bithead

Hi all, 

I am looking to build an inventory list of everything we have within XSOAR, such as:
All playbooks, dashboards, integrations regardless of whether or not we use them.

Extra points if we also know the author of each item, and / or the last person that modified the item.

 

I know that we can check the web console but it would be great if we can generate a list to get the above information. Thanks in advance!

1 REPLY 1

L2 Linker

API can do some.
For the content pack items: https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/9ac1vvpehxcsh-get-metadata-for-all-installed-co...
Dashboards: https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/52h3p82roa90h-get-all-dashboards-details

etc.(Please check all endpoints): https://cortex-panw.stoplight.io/docs/cortex-xsoar-8/sj83ddzz60ukq-get-all-incident-fields-in-the-te...
note: Export content function in the About > Troubleshooting page is also useful to export all "custom content". Then, you can programmatically find/sort them, but it doesn't cover OOTB objects.

 
But your use case seems to be more on the content objects side. Are you using Remote Repositories? > https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.8/Cortex-XSOAR-On-prem-Documentation/Push-...
There(in the private repo), you can see all your OOTB + custom content in the repository. If you are already using the DEV to PROD, you can track the changes and implement an advanced change control flow, too.
Owner info, however, is not supported; for CRUD actions you can check the management audit logs. Or a bit above Remote Repos approach, a CI/CD-based implementation would help you achieve all ownership, code tracking on push/pull, artifactory,etc. (But needless to say, it's not OOTB flow, a complete custom implementation path: https://xsoar.pan.dev/docs/reference/packs/content-management)

  • 186 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!