Details
| ID | ContentPackInstaller |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/xsoar-tools:1.0.0.11807991 |
| Tags | configuration Content Management |
README
Install content packs from Marketplace.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | configuration, Content Management |
| Cortex XSOAR Version | 6.0.0 |
Used In
This script is used in the following playbooks and scripts.
- Configuration Setup
- Content Update Manager
Inputs
| Argument Name | Description |
|---|---|
| packs_data | Information about the packs to install including pack ID and version. |
| pack_id_key | The key in which the pack ID is stored. |
| pack_version_key | The key in which the pack version is stored. Enter “latest” to update all packs to the latest version. |
| install_dependencies | Whether to install the pack dependencies. In XSIAM or XSOAR 8.x and above, this argument is set to “true” by default. |
Outputs
| Path | Description | Type |
|---|---|---|
| ContentPackInstaller.packname | The name of the pack. | Unknown |
| ContentPackInstaller.packversion | The version of the pack. | Unknown |
| ContentPackInstaller.installationstatus | The installation status of the pack. | Unknown |
Command Examples
Without escape chars
!ContentPackInstaller packs_data=`[{"id":"GoogleCloudCompute","itemVersion":"latest"},{"id":"GoogleKubernetesEngine","itemVersion":"latest"},{"id":"GoogleSafeBrowsing","itemVersion":"latest"}]` pack_id_key=id pack_version_key=itemVersion
With escape chars
!ContentPackInstaller packs_data="[{\"packid\": \"GoogleCloudCompute\",\"packversion\": \"latest\"}]" pack_id_key=packid pack_version_key=packversion
Troubleshooting
Mulit-tenant environments
Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.
General Failures
- Make sure the Core REST API integration is configured correctly, and clicking the test button returns success.
- Make sure you have a connection to Marketplace. You can check that by going to the Marketplace page in the Cortex XSOAR UI and refreshing.
- Make sure the packs_data parameter value is in the correct format:
- A list
[]containing dictionaries{}. For each pack you want to install, add a dictionary with pack_id_key as the pack id key and pack_version_key as the pack version key as demonstrated in the command examples above. - The escape characters are in the right order and none are missing.
- A list
args: - description: Information about the packs to install including pack ID and version. isArray: true name: packs_data required: true - description: The key in which the pack ID is stored. name: pack_id_key required: true - description: The key in which the pack version is stored. Enter "latest" to update all packs to the latest version. name: pack_version_key required: true - name: install_dependencies description: Whether to install the pack dependencies. defaultValue: 'true' auto: PREDEFINED predefined: - 'true' - 'false' commonfields: id: ContentPackInstaller version: -1 name: ContentPackInstaller comment: Content packs installer from marketplace. outputs: - contextPath: ContentPackInstaller.packname description: The name of the pack. type: Unknown - contextPath: ContentPackInstaller.packversion description: The version of the pack. type: Unknown - contextPath: ContentPackInstaller.installationstatus description: The installation status of the pack. type: Unknown script: '-' subtype: python3 tags: - configuration - Content Management timeout: 600ns type: python dockerimage: demisto/xsoar-tools:1.0.0.11807991 marketplaces: - xsoar - marketplacev2 - platform supportedModules: - agentix - cloud - cloud_runtime_security - cloud_posture - xsiam - edr tests: - ContentPackInstaller_Test fromversion: 6.0.0