QRadarGetCorrelationLogs Deprecated

commonfields:
  id: QRadarGetCorrelationLogs
  version: -1
name: QRadarGetCorrelationLogs
script: ''
type: python
subtype: python2
tags:
- QRadar
comment: Deprecated. Use the **QRadarCorrelationLog** playbook instead. Return the QRadar Correlation logs if exist
system: true
deprecated: true
args:
- name: offenseID
  required: true
  default: true
  description: The offense ID to query.
  defaultValue: ${incident.labels.id}
- name: startTime
  required: true
  description: query from startTime (in timestamp format).
  defaultValue: ${incident.labels.start_time}
- name: headers
  description: Table headers
- name: range
  description: Number of results in return
- name: interval
  description: Interval to poll for results. Default is 10 seconds.
- name: timeout
  description: Timeout in seconds. Default is 10 minutes.
- name: fields
  description: Fields to filter in
- name: qid
  required: true
  description: The Correlation QID to query.
  defaultValue: ${Correlation.QID}
- name: additionalQueryFields
  description: Add more fields for basic query (a list with comma separators)
- name: is_cre_name_null
  auto: PREDEFINED
  predefined:
  - "True"
  - "False"
  description: Determines whether the CRE name is null by default.
  defaultValue: "True"
outputs:
- contextPath: QRadar
  description: QRadar context output
- contextPath: QRadar.Log
  description: The QRadar offense correlation logs
- contextPath: QRadar.Log.QID
  description: The log's correlation ID
- contextPath: QRadar.Log.SourceIP
  description: The log's source IP
- contextPath: QRadar.Log.DestinationPort
  description: The log's destination port
- contextPath: QRadar.Log.SourcePort
  description: The log's source port
- contextPath: QRadar.Log.DestinationIP
  description: The log's destination IP
- contextPath: QRadar.Log.Category
  description: The log's category
- contextPath: QRadar.Log.IdentityIP
  description: The log's identity IP
- contextPath: QRadar.Log.Username
  description: The log's username
- contextPath: QRadar.Log.StartTime
  description: The log's start time
- contextPath: QRadar.Log.Magnitude
  description: The log's magnitude
- contextPath: QRadar.Log.ProtocolName
  description: The log's protocol name
scripttarget: 0
dependson:
  must:
  - qradar-searches
tests:
- no tests
fromversion: 5.0.0
dockerimage: demisto/python:2.7.18.20958
supportedModules:
- agentix
- xsiam
- edr