IqHubLog

Logs detection and progression count with respective links to confluera's IQ-Hub portal in tabular format.

python · Confluera

Source

from CommonServerPython import *

from CommonServerUserPython import *

# Executes confluera-fetch-detections command/script
detections_data = demisto.executeCommand("confluera-fetch-detections", {"hours": "72"})

if detections_data[0] and detections_data[0]["Contents"] and detections_data[0]["Contents"]["Detections URL"]:
    det_url = detections_data[0]["Contents"]["Detections URL"]
else:
    det_url = ""

if detections_data[1] and detections_data[1]["Contents"]:
    det_count = len(detections_data[1]["Contents"])
else:
    det_count = 0

# Executes confluera-fetch-progressions command/script
progressions_data = demisto.executeCommand("confluera-fetch-progressions", {"hours": "72"})

if progressions_data[0] and progressions_data[0]["Contents"] and progressions_data[0]["Contents"]["Progressions URL"]:
    prog_url = progressions_data[0]["Contents"]["Progressions URL"]
else:
    prog_url = ""

if progressions_data[1] and progressions_data[1]["Contents"]:
    prog_count = len(progressions_data[1]["Contents"])
else:
    prog_count = 0


data = [{"Count": "Detections: " + str(det_count), "URL": det_url}, {"Count": "Progressions:" + str(prog_count), "URL": prog_url}]

return_results({"total": 2, "data": data})

README

IqHubLog Script

Script Data


Name Description
Script Type python3
Tags Confluera
Cortex XSOAR Version 6.0.0

Inputs


Argument Name Description
N/A N/A

Outputs


Path Description Type
N/A N/A N/A

Script Example


!IqHubLog

Human Readable Output


alt text