EDL Monitor

Details

ID	`EDL Monitor`
Provider	Palo Alto Networks
Category	Utilities
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

This integration can monitor EDLs by emailing the content of an EDL as a zipped file to a specified user at an interval (when run with a job), and/or simply monitor the EDL for availability and email the user if the EDL is not available in other playbooks

Configure EDL Monitor in Cortex

Parameter	Description	Required
Timeout:	Timeout (in seconds) for how long to wait for EDL response before detecting as down (default 2 minutes)	False
Trust any certificate (not secure)		False
Use system proxy settings		False
Email server:		False
Email username		False
Email password		False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

get-edl-contents

Gets the current contents of an EDL

Base Command

get-edl-contents

Input

Argument Name	Description	Required
EDL	EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name).	Required
EDL_username	EDL username, for auth to the EDL (optional).	Optional
EDL_password	EDL password, for auth to the EDL (optional).	Optional

Context Output

There is no context output for this command.

email-edl-contents

Gets the current contents of an EDL and emails it to a specified email address

Base Command

email-edl-contents

Input

Argument Name	Description	Required
EDL	EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name).	Required
Email	Email address that you want to send the EDL contents to.	Required
EDL_username	EDL username, for auth to the EDL (optional).	Optional
EDL_password	EDL password, for auth to the EDL (optional).	Optional

Context Output

There is no context output for this command.

check-status

Return the response code of the EDL

Base Command

check-status

Input

Argument Name	Description	Required
EDL	EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name).	Required
EDL_username	EDL username, for auth to the EDL (optional).	Optional
EDL_password	EDL password, for auth to the EDL (optional).	Optional
Email	Email.	Optional

Context Output

Path	Type	Description
ResponseCode	number	The response code.

Configuration parameters

timeout — Timeout:
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings
emailServer — Email server:
emailCredentials — Email username

Commands (3)

check-status
Return the response code of the EDL
email-edl-contents
Gets the current contents of an EDL and emails it to a specified email address
get-edl-contents
Gets the current contents of an EDL

Source

EDLMonitor.py EDLMonitor.yml EDLMonitor_description.md

Download History Raw

category: Utilities
provider: Palo Alto Networks
commonfields:
  id: EDL Monitor
  version: -1
configuration:
- additionalinfo: Timeout (in seconds) for how long to wait for EDL response before detecting as down (default 2 minutes)
  defaultvalue: '120'
  display: 'Timeout:'
  name: timeout
  type: 0
  required: false
- advanced: true
  display: Trust any certificate (not secure)
  name: insecure
  section: Connect
  type: 8
  required: false
- advanced: true
  display: Use system proxy settings
  name: proxy
  section: Connect
  type: 8
  required: false
- defaultvalue: smtp.gmail.com
  display: 'Email server:'
  name: emailServer
  type: 0
  required: false
- display: Email username
  displaypassword: Email password
  name: emailCredentials
  type: 9
  required: false
description: This integration can monitor EDLs by emailing the content of an EDL as a zipped file to a specified user at an interval (when run with a job), and/or simply monitor the EDL for availability and email the user if the EDL is not available in other playbooks
display: EDL Monitor
name: EDL Monitor
script:
  commands:
  - arguments:
    - description: EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name)
      name: EDL
      required: true
      type: textArea
    - description: EDL username, for auth to the EDL (optional)
      name: EDL_username
      type: textArea
    - description: EDL password, for auth to the EDL (optional)
      name: EDL_password
      type: textArea
    description: Gets the current contents of an EDL
    name: get-edl-contents
  - arguments:
    - description: EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name)
      name: EDL
      required: true
      type: textArea
    - description: Email address that you want to send the EDL contents to
      name: Email
      required: true
      type: textArea
    - description: EDL username, for auth to the EDL (optional)
      name: EDL_username
      type: textArea
    - description: EDL password, for auth to the EDL (optional)
      name: EDL_password
      type: textArea
    description: Gets the current contents of an EDL and emails it to a specified email address
    name: email-edl-contents
  - arguments:
    - description: EDL IP or URL (e.g. http://xsoarserver.com:10009 or https://xsoarserver.com/instance/execute/instance_name)
      name: EDL
      required: true
      type: textArea
    - description: EDL username, for auth to the EDL (optional).
      name: EDL_username
      type: textArea
    - description: EDL password, for auth to the EDL (optional).
      name: EDL_password
      type: textArea
    - description: Email.
      name: Email
      type: textArea
    description: Return the response code of the EDL
    name: check-status
    outputs:
    - contextPath: ResponseCode
      description: The response code.
      type: number
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)