Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-21-2023 09:25 AM
Hello community,
I am having a problem retrieving fields in XSOAR from XDR. I get most of the fields, but there are some that do not reach XSOAR, such as, for example, the "action_evtlog_data_fields" (it is not that they do not appear in the context, it is simply that the incident in XSOAR does not have those fields, as shown in the picture).
Although these fields can be retrieved from XDR with an XQL query, what I want to know is how can I retrieve this and other fields without using an XQL query for each new incident?
