About bhargav_11

The one in incident context subset will be called "incident.ExtractedFields" in case you want to keep the original name. ... View more

If you are filtering via the UI, you can use the query <FieldName>="" to retrieve incidents that have an empty field. So if the field was called emailcommunications it would look like this: emailcommunications="". If there are multiple fields you need to filter by you can use and/or operators to logically filter for the subset of incidents you are trying to retrieve. If this is being done via playbook, you can use the SearchIncidentsV2 automation. You would choose the query input and then use the same query as in the UI. ... View more

That is to update manually i want to update automatically using any API or script or function. https://xsoar.pan.dev/docs/integrations/docker#enablingdisabling-docker-image-automatic-update I got to know about this autoUpdateDockerImage: true key. But  adding this as well doesnot update the image of an automation automatically. ... View more