CreateEDLInstance
Use this automation to create an EDL instance on XSOAR.
python · Community Common Scripts
Details
| ID | CreateEDLInstance |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.11879924 |
README
Use this automation to create an EDL instance on XSOAR.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags |
Inputs
| Argument Name | Description |
|---|---|
| PortListName | The Listname in XSOAR of ports in use |
| InstanceName | The Name of the EDL instance to create |
| Query | The indicator query used to populate the EDL |
| Port | Specify specific port to use when creating the EDL instance., else it will be random (3000-50000) |
Outputs
| Name | Port | PortListName | Query |
|---|---|---|---|
| Testing | 8008 | EDL_PORT_LIST | tags:block and type:IP |
Troubleshooting
Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.
args: - defaultValue: EDL_PORT_LIST description: The Listname in XSOAR of ports in use. name: PortListName required: true - description: The Name of the EDL instance to create. name: InstanceName required: true - description: The indicator query used to populate the EDL. name: Query required: true - name: Port description: Specify specific port to use when creating the EDL instance., else it will be random (3000-50000). comment: Use this automation to create an EDL instance on XSOAR. commonfields: id: CreateEDLInstance version: -1 dockerimage: demisto/python3:3.12.13.11879924 enabled: true name: CreateEDLInstance runas: DBotWeakRole script: '' scripttarget: 0 subtype: python3 tags: [] type: python fromversion: 6.0.0 tests: - No tests (auto formatted) contentitemexportablefields: contentitemfields: fromServerVersion: "" system: true