05-03-2023 01:01 AM
I have a job run every 5 mins and it will upload a file to AWS, after it runs it would create an incident which I don't want to keep, is there any out of box automation that can delete incident as well as the artifact the job created to save some space?
05-03-2023 08:19 AM
You could use the XSOAR File Management integration (community contributed), and add a step into your playbook to delete the file once it's uploaded to AWS.
I wouldn't worry about deleting the Incident, but you can do it via a command in the Core REST API integration.
You would need another job to do it though, won't work if the Incident running your playbook tries to delete itself, then you'd need another playbook to delete that one, and so on (Basically Inception).
05-03-2023 07:12 PM
I try to use "demisto-delete-incidents (Demisto REST API)" to test delete an incident, it give me an error
Error from Core REST API is : Script failed to run: TypeError: Cannot read property 'constructor' of undefined at reduce_data (script:183:21(37)) (2603)
what is that mean
05-04-2023 11:45 PM
You should install "Demisto REST API (Deprecated)" and insert the API Key
05-07-2023 12:00 AM
I actually find the problem is on the REST API configuration, and API ID should be leave as blank rather than have an value. not sure why but that is how I get rid of the error
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!