CreateIncidents

Details

ID	`CreateIncidents`
Provider	Open Source
Category	Utilities
From Version	6.1.0
Docker Image	`demisto/python3:3.12.13.10116658`
Supported Modules	Agentix XSIAM

README

CreateIncidents fetches incident created manually.

Configure Create Test Incidents in Cortex

Parameter	Description	Required
Source URL	The base URL of the source you wish to upload/downlowd files from.	False
Trust any certificate (not secure)		False
Use system proxy settings		False
Incident type		False
Fetch incidents		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

create-test-incident-from-file

Creates incidents from JSON files provided, and stores them in the instance context.

Base Command

create-test-incident-from-file

Input

Argument Name	Description	Required
incidents_path	The path of the JSON file containing incidents. Can contain one incident or a list of incidents. For example: Packs/somePack/TestPlaybooks/examples.json.	Required
attachment_paths	The paths of the files to be added to incidents as attachment. Will be added to all incidents provided in the incident_path file. For example: Packs/somePack/TestPlaybooks/attach.eml.	Optional

Context Output

There is no context output for this command.

Command example

!create-test-incident-from-file incidents_path=Packs/DeveloperTools/Integrations/CreateIncidents/test_data/incidents.json attachment_path="Packs/DeveloperTools/Integrations/CreateIncidents/test_data/YOU HAVE WON 10000$.eml"

Human Readable Output

Loaded 1 incidents from file.

create-test-incident-from-raw-json

Creates incidents from a JSON file, and stores it in the instance context.

Base Command

create-test-incident-from-raw-json

Input

Argument Name	Description	Required
incident_raw_json	The JSON object that represents the incident.	Optional
incident_entry_id	The entry ID of the JSON file that represents the incidents.	Optional
attachment_paths	The paths of the files to be added to incidents as attachment. Will be added to all incidents provided in the incident_path file. For example: Packs/somePack/TestPlaybooks/attach.eml.	Optional
attachment_entry_ids	The enry IDs of the incident attachments.	Optional

Context Output

There is no context output for this command.

Command example

!create-test-incident-from-raw-json incident_entry_id="12@12"

Human Readable Output

Loaded 1 incidents from file.

!create-test-incident-from-raw-json incident_raw_json="{'name': 'test_incident'}"

Human Readable Output

Loaded 1 incidents from file.

Configuration parameters

url — Source URL
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
incidentType — Incident type
incidentFetchInterval — Incidents Fetch Interval
isFetch — Fetch incidents

Commands (2)

create-test-incident-from-file
Creates incidents from json files provided, and stores it in the instance context.
create-test-incident-from-raw-json
Creates incidents from json file, and stores it in the instance context.

Source

CreateIncidents.py CreateIncidents_test.py CreateIncidents.yml CreateIncidents_description.md command_examples.txt

Download History Raw

category: Utilities
provider: Open Source
sectionorder:
- Connect
- Collect
commonfields:
  id: CreateIncidents
  version: -1
configuration:
- defaultvalue: https://raw.github.com/demisto/content/master
  additionalinfo: The base url of the source you wish to upload/ downlowd files from.
  display: Source URL
  name: url
  required: false
  type: 0
  section: Connect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  section: Connect
  advanced: true
  required: false
- display: Incident type
  name: incidentType
  type: 13
  section: Connect
  required: false
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  section: Collect
  advanced: true
- display: Fetch incidents
  name: isFetch
  type: 8
  section: Collect
  required: false
description: CreateIncidents fetches custom incidents that are created manually.
display: Create Test Incidents
name: CreateIncidents
script:
  commands:
  - arguments:
    - description: |-
        The path of json file containing incidents. Can contain one incident
        or a list of incidents. For example: Packs/somePack/TestPlaybooks/examples.json'. 
        Incidents without name will be named Mocked Incident.
      name: incidents_path
      required: true
    - description: 'The paths of the files to be added to incidents as attachment. Would be added to all incidents provided in the incident_path file. For example: Packs/somePack/TestPlaybooks/attach.eml'
      name: attachment_paths
    description: Creates incidents from json files provided, and stores it in the instance context.
    name: create-test-incident-from-file
  - arguments:
    - description: 'The enry ID of the json file that represents the incidents.'
      name: incident_entry_id
      required: false
    - description: 'The enry IDs of the incident attachments.'
      name: attachment_entry_ids
      required: false
      isArray: true
    - description: 'The json object that represents the incident.'
      name: incident_raw_json
      required: false
    - description: 'The paths of the files to be added to incidents as attachment. Would be added to all incidents provided in the incident_path file. For example: Packs/somePack/TestPlaybooks/attach.eml'
      name: attachment_paths
    description: Creates incidents from json file, and stores it in the instance context.
    name: create-test-incident-from-raw-json
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
fromversion: 6.1.0