Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Who rated this post

Problem retrieving fields from XDR

L1 Bithead

Hello community,


I am having a problem retrieving fields in XSOAR from XDR. I get most of the fields, but there are some that do not reach XSOAR, such as, for example, the "action_evtlog_data_fields" (it is not that they do not appear in the context, it is simply that the incident in XSOAR does not have those fields, as shown in the picture).



Although these fields can be retrieved from XDR with an XQL query, what I want to know is how can I retrieve this and other fields without using an XQL query for each new incident?

Thanks for the help!!


Who rated this post