- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
05-30-2022 04:12 AM - edited 05-30-2022 04:14 AM
When should you use the "Delete context" script? Is it a good practice to use it at the beginning of the playbooks?
** Note: this is a question from our Customer Success Webinar: Playbook optimization in Cortex XSOAR
05-30-2022 04:15 AM - edited 05-31-2022 10:08 AM
Reply by: @RahulVijaydev
In a live playbook, the use of DeleteContext at the beginning is not necessary since the Context starts of being empty (Unless auto-extraction was enabled on the incident type and enrichmment data was outputted). DeleteContext is typically used during development and troubleshooting to clean up context objects when the playbook is re-run multiple times in the same incident, or in a live playbook to delete context objects that do not add much value to the flow of the playbook, but are nonetheless still outputted by commands/scripts, as a context optimization strategy.
05-30-2022 04:15 AM - edited 05-31-2022 10:08 AM
Reply by: @RahulVijaydev
In a live playbook, the use of DeleteContext at the beginning is not necessary since the Context starts of being empty (Unless auto-extraction was enabled on the incident type and enrichmment data was outputted). DeleteContext is typically used during development and troubleshooting to clean up context objects when the playbook is re-run multiple times in the same incident, or in a live playbook to delete context objects that do not add much value to the flow of the playbook, but are nonetheless still outputted by commands/scripts, as a context optimization strategy.
04-02-2024 11:41 PM
Dear,
Have any way to know the Context was overlaped?
04-03-2024 11:59 AM - last edited on 04-03-2024 12:21 PM by rtsedaka
04-04-2024 12:08 AM
Sorry for my question, it wasn't clearly.
I just didn't understand when you said: "the playbook is re-run multiple times in the same incident".
I don't exactly know what happen with the context data if the playbook is re-run multiple times in the same incident, can you explain?
Warm Regards,
Hai
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!