This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
About JamesWiggins
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About JamesWiggins
07-28-2022
5Posts
0Likes
0Solutions
Jul 28, 2022Last Visited
User
Activity
User
Profile
Latest posts by JamesWiggins
| Subject | Views | Posted |
|---|---|---|
| 207 | 07-28-2022 06:10 AM | |
| 313 | 07-01-2022 12:46 PM | |
| 374 | 07-01-2022 06:22 AM | |
| 505 | 07-01-2022 06:12 AM | |
| 742 | 06-15-2022 06:36 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 12-15-2021 06:03 AM |
| Date Last Visited | 07-28-2022 02:34 PM |
| Posts | 5 |
07-28-2022
06:10 AM
Is it possible for DEV and PROD servers to use the same set of engines?
#DEV
#PROD
#XSOAR
#ENGINE
... View more
07-01-2022
12:46 PM
Thanks for the reply! Can you elaborate on what you mean by "create a custom dataset"? Are you talking about just using the export function to create a CSV?
... View more
07-01-2022
06:22 AM
I would like to query XDR externally for the data stored in the Host Insights > Vulnerability Assessment page. I looked through all of the available APIs, but none of them seem to have data related to CVEs. I would not be opposed to writing a custom XQL query for this data, but I do not see fields related to CVE's in the xdr_data schema either.. is it in there somewhere and I just missed it? I know I can manually export the data to file on the page, but I need to accomplish this programmatically. Any tips on how I could go about extracting this data?
... View more
07-01-2022
06:12 AM
Yes, this is exactly what I ended up doing. I had to pull down all of the incidents for the tenant, and then filter the incidents by host in script with a list of endpoint ID's I had previously retrieved from the get_endpoints API. Thanks for your help!
... View more
06-15-2022
06:36 AM
The Get Incidents API allows you to filter based on an incident_id_list, but not a list of endpoint_ids much less endpoint group. The Get Alerts API allows you to filter on an alert_id_list, but not a list of endpoint_ids much less endpoint group. I'm trying to figure out how to get a list of alert_ids or incident_ids filtered by endpoint group or even endpoint_id so that I could use it filter either of the above API's. I can't figure out how build a query in XDR for this because I don't see any endpoint or incident information in the xdr_data schema This seems like a standard bit of data to pull.. just incidents or alerts by endpoint but I can't seem to figure it out. What am I missing?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-28-2022
02:34 PM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks