Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

L2 Linker

Hey Martin!

I think the part that is creating an issue is the way the list is returning the values.   Basically the list can store a chunk of data in almost any format.  You can comma separate it or use newlines or whatever you want.  You may have to parse the output though.  Our commands can usually iterate over lists but it's going to expect something more like a json or python style list being handed to it.  Use the Split transformer to break up the output to the command before it processes it.  Here's an example:

Screen Shot 2021-06-14 at 10.32.16 AM.png

Created the list as a comma separated value

If I try to print it out now you get basically a single string with all of the values.  You can tell because our Print statement processed it in one command instead of iterating through each of them.

Screen Shot 2021-06-14 at 10.44.37 AM.png

If you create a small playbook, add in the command you want to run and use a transformer like this:

Screen Shot 2021-06-14 at 10.46.03 AM.png

 Then your output will break up into an actual list and process each item individually.

Screen Shot 2021-06-14 at 10.47.13 AM.png


 I hope that helps!

Doug Couch  |  XSOAR Customer Success Engineer - Manager
Palo Alto Networks  |  3000 Tannery Way  |  Santa Clara, CA 95054  

View solution in original post

Who rated this post