ExpanseAggregateAttributionUser Deprecated
Deprecated. No available replacement. > Aggregate entries from multiple sources into AttributionUser.
Details
| ID | ExpanseAggregateAttributionUser |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.10.13.83255 |
README
Aggregate entries from multiple sources into AttributionUser
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | |
| Cortex XSOAR Version | 6.0.0 |
Used In
This script is used in the following playbooks and scripts.
- Expanse Attribution Subplaybook
Inputs
| Argument Name | Description |
|---|---|
| input | Input list. |
| current | Current aggregation state. |
| username_fields | Comma separated list of fields to treat as serial number. |
| sightings_fields | Comma separated list of field names to be considered sighting counts. |
Outputs
| Path | Description | Type |
|---|---|---|
| Expanse.AttributionUser.username | Username of the user | string |
| Expanse.AttributionUser.domain | Domain of the user | string |
| Expanse.AttributionUser.groups | List of groups the user is member of | Unknown |
| Expanse.AttributionUser.display-name | Display Name | string |
| Expanse.AttributionUser.description | Description of the user | string |
| Expanse.AttributionUser.sightings | Number of sessions seen on this device | number |
name: ExpanseAggregateAttributionUser comment: Deprecated. No available replacement. > Aggregate entries from multiple sources into AttributionUser. deprecated: true commonfields: id: ExpanseAggregateAttributionUser version: -1 args: - name: input description: Input list. isArray: true - name: current description: Current aggregation state. isArray: true - name: username_fields description: Comma separated list of fields to treat as serial number. defaultValue: source_user,srcuser,user isArray: true - name: sightings_fields description: Comma separated list of field names to be considered sighting counts. defaultValue: count isArray: true outputs: - contextPath: Expanse.AttributionUser.username description: Username of the user. type: string - contextPath: Expanse.AttributionUser.domain description: Domain of the user. type: string - contextPath: Expanse.AttributionUser.groups description: List of groups the user is member of. - contextPath: Expanse.AttributionUser.display-name description: Display Name. type: string - contextPath: Expanse.AttributionUser.description description: Description of the user. type: string - contextPath: Expanse.AttributionUser.sightings description: Number of sessions seen on this device. type: number script: '-' tags: [] timeout: '0' type: python subtype: python3 dockerimage: demisto/python3:3.10.13.83255 fromversion: 6.0.0 tests: - No tests (auto formatted)