SearchIndicatorInEventsAgentix

A polling wrapper script; Searches for a specific indicator in the tenant's event and log data, and extracts the logs the indicator appears in.

python · Core

Source

import demistomock as demisto  # noqa: F401
from CommonServerPython import *  # noqa: F401


def main():
    args = demisto.args()
    args["time_frame"] = args.get("time_frame") or "7 days"
    try:
        return_results(execute_polling_command("SearchIndicatorInEvents", args))
    except Exception as e:
        return_error(f"Failed to execute script.\nError:\n{e!s}")


if __name__ in ("__main__", "__builtin__", "builtins"):
    main()