XDR status

The indicator status in XDR.

Cortex XDR by Palo Alto Networks singleSelect

Details

ID	`indicator_xdrstatus`
CLI Name	`xdrstatus`
Type	singleSelect
From Version	5.5.0
Required	No
Read Only	No
Searchable	Yes
Case Insensitive	Yes
Expiration (hours)	72

Select Values

enabled disabled

Associated Indicator Types

Source

incidentfield-xdrstatus.json

Download History Raw

{
    "id": "indicator_xdrstatus",
    "version": -1,
    "modified": "2020-06-14T14:28:24.886929+03:00",
    "itemVersion": "",
    "fromVersion": "5.5.0",
    "toServerVersion": "",
    "name": "XDR status",
    "ownerOnly": false,
    "placeholder": "",
    "description": "The indicator status in XDR.",
    "cliName": "xdrstatus",
    "type": "singleSelect",
    "closeForm": false,
    "editForm": true,
    "required": false,
    "script": "",
    "fieldCalcScript": "",
    "neverSetAsRequired": false,
    "isReadOnly": false,
    "selectValues": [
        "enabled",
        "disabled"
    ],
    "validationRegex": "",
    "useAsKpi": false,
    "locked": false,
    "system": false,
    "content": true,
    "group": 2,
    "hidden": false,
    "associatedTypes": [
        "IP",
        "Domain",
        "File"
    ],
    "systemAssociatedTypes": null,
    "associatedToAll": false,
    "unmapped": false,
    "unsearchable": false,
    "caseInsensitive": true,
    "columns": null,
    "defaultRows": null,
    "sla": 0,
    "threshold": 72,
    "breachScript": ""
}