Question from Playbook Optimization webinar: Delete context script

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Question from Playbook Optimization webinar: Delete context script

L5 Sessionator

When should you use the "Delete context" script? Is it a good practice to use it at the beginning of the playbooks?

 

** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR

Cortex XSOAR 

1 accepted solution

Accepted Solutions

L5 Sessionator

Reply by: @RahulVijaydev 

 

In a live playbook, the use of DeleteContext at the beginning is not necessary since the Context starts of being empty (Unless auto-extraction was enabled on the incident type and enrichmment data was outputted). DeleteContext is typically used during development and troubleshooting to clean up context objects when the playbook is re-run multiple times in the same incident, or in a live playbook to delete context objects that do not add much value to the flow of the playbook, but are nonetheless still outputted by commands/scripts, as a context optimization strategy.

View solution in original post

4 REPLIES 4

L5 Sessionator

Reply by: @RahulVijaydev 

 

In a live playbook, the use of DeleteContext at the beginning is not necessary since the Context starts of being empty (Unless auto-extraction was enabled on the incident type and enrichmment data was outputted). DeleteContext is typically used during development and troubleshooting to clean up context objects when the playbook is re-run multiple times in the same incident, or in a live playbook to delete context objects that do not add much value to the flow of the playbook, but are nonetheless still outputted by commands/scripts, as a context optimization strategy.

Dear,

Have any way to know the Context was overlaped?

 

L3 Networker

Hello @haicd 

 

Could you elaborate on what you mean by context overlapping, please?

 

Thanks,

Rahul

 

Hi @RahulVijaydev 


Sorry for my question, it wasn't clearly.

I just didn't understand when you said: "the playbook is re-run multiple times in the same incident". 

I don't exactly know what happen with the context data if the playbook is re-run multiple times in the same incident, can you explain?

 

Warm Regards,

Hai

 

  • 1 accepted solution
  • 2413 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!