About LinsongGuo

I have a custom timer filed called analysttimer, which recording the time analyst spend on an incident, once the incident this field will shows total time spend. I can see the total time is captured in the analysttimer.totalduration field.    When create a report, I can only refer analysttimer filed as whole in the widget, rather than directly refer to analysttimer.totalduration as column.    It shows the actual mins if I look at the report directly in XSOAR, however if I export this report to a CSV or PDF the column shows the status of the analysttimer rather than the actual mins as attached image shows.   As anyone see this before? any suggestion how can I get the actual mins in the CSV file?   Thank you in advance ... View more

I am new to XSOAR and I am trying to create table show incident close reason group by incident type looks like below     Ture positive False positive Duplicate incident type 1 1 2 11 incident type 2 2 4 33 incident type 3 4 16 22 I cant find any widget can do this so I try to look into the automation script but I have no idea how it going to work.   If anyone can give a hit on this would be great?   In addition, does anyone can share some good starting tutorial relate with automation scripting would be appricated   Regards   ... View more