About cstone

Can you try putting back ticks around the file path like this: file_path=`"\\Path\\To\\The\\File\\A\\Directory with whitespaces\\Directory\\Directory2with whitespaces \\File.exe"` ... View more

can you share a screenshot of the output in the playground after you trigger this command? Thanks   ... View more

Are you not able to hit the green check box? ... View more

Fill out the condition Left Side Equals Right Side. click the Green Check mark and the Ok button should become available.  ... View more

    to reference an input in python, you would use demisto.args().get('EntryId'). Job_softwaredate_Update_Trip need to have an argument called 'EntryId' on it. ... View more

Yes please ... View more

can you share a screenshot of your integration settings as well please ... View more

This looks like an account permissions issue. according to the api docs, you need to add the access key you are using to the allowlist to resolve this.   https://help.sumologic.com/Manage/Security/Access-Keys ... View more

Hello,  You will want to first make sure the field (in this case a field called URL) is added to your incident type and then map the "event info" field to that incident type. AND then be sure you are displaying that field on your incident layout (in your case you want it to be displayed on the summary tab so that's where you would add the field.  Here are some helpful links to guide you: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-6/cortex-xsoar-admin/incidents/incident-management/incident-fields https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-6/cortex-xsoar-admin/incidents/classification-and-mapping/create-a-mapper https://docs.paloaltonetworks.com/cortex/cortex-xsoar/5-5/cortex-xsoar-admin/incidents/incidents-management/customize-incident-view-layouts/customize-an-incident-type-layout Hope this helps.  ... View more

where are you seeing this error?  ... View more

Be sure that the First fetch time is formatted in yyyy-mm-dd or yyyy-mm-ddThh:mm:ss. see my attached screenshot ... View more

The issue is you have "owner": { ... } it should be like this:  { "owner":"jboyd@x.onmicrosoft.com", "assignedTo": "Joshua Boyd", "email": "soc@email.com", "objectId": null, "userPrincipalName": null } ... View more

I added an instance for CISA to my environment and it only pulled 10 items the first time. It looks like on the preceding pulls, it's not clearing the number of fetches from the first time, it's only updating the timestamp even though it didn't actually find anything new from the feed.  ... View more