GetFieldsByIncidentType

Returns the incident field names associated to the specified incident type.

Details

ID	`GetFieldsByIncidentType`
Language	python
From Version	5.0.0
Docker Image	`demisto/python3:3.12.13.10404775`

README

Troubleshooting

Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.

Source

GetFieldsByIncidentType.py GetFieldsByIncidentType_test.py GetFieldsByIncidentType.yml

Download History Raw

commonfields:
  id: GetFieldsByIncidentType
  version: -1
name: GetFieldsByIncidentType
script: ''
type: python
tags: []
comment: Returns the incident field names associated to the specified incident type.
enabled: true
args:
- name: incident_type
  required: true
  description: The incident type for which to return incident field names.
- name: short_names
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Whether to shorten the incident field names. If "true", will cause output to use shortened field names. The default value is "false".
  defaultValue: "false"
- name: exclude_system
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Whether to only return non-system fields. If "true", will only output non-system fields. The default value is "false".
  defaultValue: "false"
- name: explicit_only
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Whether to only include fields that are explicitly associated to the incident type. If "true", only fields which are explicitly associated to the incident type will be included (i.e., excludes fields for which the "associate to any" checkbox is selected). The default value is "false".
  defaultValue: "false"
- name: pprint
  auto: PREDEFINED
  predefined:
  - "true"
  - "false"
  description: Pretty-prints the output.
  defaultValue: "true"
scripttarget: 0
subtype: python3
dependson:
  must:
  - '|||core-api-get'
dockerimage: demisto/python3:3.12.13.10404775
runas: DBotWeakRole
tests:
- No test - unit test
fromversion: 5.0.0
marketplaces:
- xsoar
- marketplacev2
- platform
supportedModules:
- agentix
- cloud
- cloud_runtime_security
- cloud_posture
- xsiam
- edr