Hi!
When we run the appendIndicatorField task, the last IP address of an array never gets tagged. Please see the following examples for clarification:
Example 1: works fine
!appendIndicatorField indicatorsValues="134.122.135.178" field="tags" fieldValue="BlockPA" using-brand="Builtin"
Example 2: tags IP 134.122.135.178, doesn't tag IP 43.128.225.120 !appendIndicatorField indicatorsValues="134.122.135.178,43.128.225.120" field="tags" fieldValue="BlockPA" using-brand="Builtin"
Example 3: tags IP's 134.122.135.59,107.170.234.9, doesn't tag IP 185.224.128.30
!appendIndicatorField indicatorsValues="134.122.135.59,107.170.234.9,185.224.128.30" field="tags" fieldValue="BlockPA" using-brand="Builtin" We run the task as described in official documentation: https://xsoar.pan.dev/docs/reference/scripts/appendindicator-field-wrapper indicators_values: A comma-separated list of indicators values. For example, for IP indicators, "1.1.1.1,2.2.2.2".
Does anyone know if this is a bug or we are making some mistake here?
Regards.
... View more