Details
| ID | GetEntries |
|---|---|
| Language | python |
| From Version | 6.5.0 |
| Docker Image | demisto/python3:3.12.13.10404775 |
| Tags | Utility |
README
Collect entries matching to the conditions in the war room.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Tags | Utility |
| Cortex XSOAR Version | 6.5.0 |
Inputs
| Argument Name | Description |
|---|---|
| id | Optional incident ID to fetch entries from. If not specified, current incident is used. |
| tags | The list of tags. |
| categories | The list of categories. (commandAndResults, playbookTaskResult, playbookTaskStartAndDone, playbookErrors, justFound, deleted, incidentInfo, chats, evidence, notes, attachments). |
| page_size | The number of entries to return. Maximum is 1000. |
| last_id | Return entries starting from the specified entry ID and backward. |
| first_id | Return entries starting from the specified entry ID and forward. |
| selected_entry_id | Return entries before and after the specified entry ID. |
| users | Return entries with the specified users. |
| tags_and_operator | Whether to return entries that include all specified tags. |
| from_time | Return entries from this time and forward. Format is ISO8601 (i.e., ‘2020-04-30T10:35:00.000Z’). |
| parent_id | The ID of the parent entry. |
Outputs
| Path | Description | Type |
|---|---|---|
| Entry.ID | Entry ID. | Unknown |
| Entry.Type | Entry Type. | Unknown |
| Entry.Tags | Tags associated with the entry. | Unknown |
| Entry.Category | Entry categories. | Unknown |
| Entry.Created | Creation time of the entry. | Unknown |
| Entry.Modified | Last modified time of the entry. | Unknown |
commonfields: id: GetEntries version: -1 name: GetEntries script: '' type: python tags: - Utility comment: Collect entries matching to the conditions in the war room. enabled: true args: - name: id description: Optional incident ID to fetch entries from. If not specified, current incident is used. - name: tags description: The list of tags. isArray: true - name: categories description: The list of categories. (commandAndResults, playbookTaskResult, playbookTaskStartAndDone, playbookErrors, justFound, deleted, incidentInfo, chats, evidence, notes, attachments). isArray: true - name: page_size description: The number of entries to return. Maximum is 1000. - name: last_id description: Return entries starting from the specified entry ID and backward. - name: first_id description: Return entries starting from the specified entry ID and forward. - name: selected_entry_id description: Return entries before and after the specified entry ID. - name: users description: Return entries with the specified users. isArray: true - name: tags_and_operator description: Whether to return entries that include all specified tags. defaultValue: 'false' predefined: - 'true' - 'false' - name: from_time description: Return entries from this time and forward. Format is ISO8601 (i.e., '2020-04-30T10:35:00.000Z'). - name: parent_id description: The ID of the parent entry. outputs: - contextPath: Entry.ID description: Entry ID. - contextPath: Entry.Type description: Entry Type. - contextPath: Entry.Tags description: Tags associated with the entry. - contextPath: Entry.Category description: Entry categories. - contextPath: Entry.Created description: Creation time of the entry. - contextPath: Entry.Modified description: Last modified time of the entry. scripttarget: 0 subtype: python3 dockerimage: demisto/python3:3.12.13.10404775 runas: DBotWeakRole fromversion: 6.5.0 tests: - No tests (auto formatted)