HealthCheckInstalledPacks
Read the installedpacks.json. Count and get packs names.
python · System Diagnostics and Health Check
Details
| ID | HealthCheckInstalledPacks |
|---|---|
| Language | python |
| From Version | 6.0.0 |
| Docker Image | demisto/python3:3.12.13.11879924 |
README
Troubleshooting
Multi-tenant environments should be configured with the Cortex Rest API instance when using this
automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked
to ensure that API calls are made to the current tenant instead of the master tenant.
import demistomock as demisto # noqa: F401 from CommonServerPython import * # noqa: F401 PACK_THRESHOLD = 70 RESOLUTION_V6 = ( "Delete unneeded packs, refer to: " "https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.14/Cortex-XSOAR-Administrator-Guide/Delete-a-Content-Pack" ) RESOLUTION_V8 = ( "Delete unneeded packs, refer to: " "https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Manage-content-packs" ) def main(): try: if is_demisto_version_ge("8.0.0"): uri = "xsoar/public/v1/contentpacks/installed-expired" resolution = RESOLUTION_V8 else: account_name = demisto.incidents()[0].get("account", "") uri = f"acc_{account_name}/contentpacks/installed-expired" if account_name else "contentpacks/installed-expired" resolution = RESOLUTION_V6 result = execute_command("core-api-get", {"uri": uri}) if isinstance(result, list): config_json = result[0].get("response", []) if result else [] else: config_json = (result or {}).get("response") or [] packs = [] need_update = 0 for item in config_json: packs.append( { "packs": item.get("name"), "currentversion": item.get("currentVersion"), "updateavailable": item.get("updateAvailable"), } ) if item.get("updateAvailable"): need_update += 1 res = [] if need_update > 0: res.append( { "category": "Content packs", "severity": "Low", "description": "Updates are needed for various content packs", "resolution": "Navigate to the market place and update the outdated packs", } ) if len(packs) > PACK_THRESHOLD: res.append( { "category": "Content packs", "severity": "Medium", "description": "The number of installed packs on your system is too high", "resolution": resolution, } ) execute_command( "setIncident", { "healthcheckinstalledpacks": packs, "healthchecktotalpacksinstalled": len(packs), "healthchecktotaloutdatedpacks": need_update, }, ) return_results( CommandResults( readable_output="HealthCheckInstalledPacks Done", outputs_prefix="HealthCheck.ActionableItems", outputs=res, ) ) except Exception as e: return_error(f"Failed to execute HealthCheckInstalledPacks: {e}") if __name__ in ("__main__", "__builtin__", "builtins"): # pragma: no cover main()