ContentPackInstaller

Content packs installer from marketplace.

python · Common Scripts

Details

IDContentPackInstaller
Languagepython
From Version6.0.0
Docker Imagedemisto/xsoar-tools:1.0.0.11807991
Tagsconfiguration Content Management

README

Install content packs from Marketplace.

Script Data


Name Description
Script Type python3
Tags configuration, Content Management
Cortex XSOAR Version 6.0.0

Used In


This script is used in the following playbooks and scripts.

  • Configuration Setup
  • Content Update Manager

Inputs


Argument Name Description
packs_data Information about the packs to install including pack ID and version.
pack_id_key The key in which the pack ID is stored.
pack_version_key The key in which the pack version is stored. Enter “latest” to update all packs to the latest version.
install_dependencies Whether to install the pack dependencies. In XSIAM or XSOAR 8.x and above, this argument is set to “true” by default.

Outputs


Path Description Type
ContentPackInstaller.packname The name of the pack. Unknown
ContentPackInstaller.packversion The version of the pack. Unknown
ContentPackInstaller.installationstatus The installation status of the pack. Unknown

Command Examples

Without escape chars

!ContentPackInstaller packs_data=`[{"id":"GoogleCloudCompute","itemVersion":"latest"},{"id":"GoogleKubernetesEngine","itemVersion":"latest"},{"id":"GoogleSafeBrowsing","itemVersion":"latest"}]` pack_id_key=id pack_version_key=itemVersion

With escape chars

!ContentPackInstaller packs_data="[{\"packid\": \"GoogleCloudCompute\",\"packversion\": \"latest\"}]" pack_id_key=packid pack_version_key=packversion

Troubleshooting

Mulit-tenant environments

Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.

General Failures

  • Make sure the Core REST API integration is configured correctly, and clicking the test button returns success.
  • Make sure you have a connection to Marketplace. You can check that by going to the Marketplace page in the Cortex XSOAR UI and refreshing.
  • Make sure the packs_data parameter value is in the correct format:
    • A list [] containing dictionaries {}. For each pack you want to install, add a dictionary with pack_id_key as the pack id key and pack_version_key as the pack version key as demonstrated in the command examples above.
    • The escape characters are in the right order and none are missing.
args:
- description: Information about the packs to install including pack ID and version.
  isArray: true
  name: packs_data
  required: true
- description: The key in which the pack ID is stored.
  name: pack_id_key
  required: true
- description: The key in which the pack version is stored. Enter "latest" to update all packs to the latest version.
  name: pack_version_key
  required: true
- name: install_dependencies
  description: Whether to install the pack dependencies.
  defaultValue: 'true'
  auto: PREDEFINED
  predefined:
  - 'true'
  - 'false'
commonfields:
  id: ContentPackInstaller
  version: -1
name: ContentPackInstaller
comment: Content packs installer from marketplace.
outputs:
- contextPath: ContentPackInstaller.packname
  description: The name of the pack.
  type: Unknown
- contextPath: ContentPackInstaller.packversion
  description: The version of the pack.
  type: Unknown
- contextPath: ContentPackInstaller.installationstatus
  description: The installation status of the pack.
  type: Unknown
script: '-'
subtype: python3
tags:
- configuration
- Content Management
timeout: 600ns
type: python
dockerimage: demisto/xsoar-tools:1.0.0.11807991
marketplaces:
- xsoar
- marketplacev2
- platform
supportedModules:
- agentix
- cloud
- cloud_runtime_security
- cloud_posture
- xsiam
- edr
tests:
- ContentPackInstaller_Test
fromversion: 6.0.0