category: Utilities
sectionorder:
- Connect
- Collect
provider: Cognni
commonfields:
  id: Cognni
  version: -1
configuration:
- display: Server URL
  name: url
  required: true
  type: 0
  section: Connect
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  advanced: true
  section: Collect
- additionalinfo: Each event may return more than one incident
  defaultvalue: '10'
  display: Maximum number of events per fetch
  name: max_fetch
  type: 0
  required: false
  section: Collect
- display: API Key
  name: apikey
  required: true
  type: 4
  section: Connect
- defaultvalue: Low
  display: Minimum severity of alerts to fetch
  name: min_severity
  options:
  - Low
  - Medium
  - High
  - Critical
  required: true
  type: 15
  section: Collect
- defaultvalue: 3 days
  display: First fetch time
  name: first_fetch
  type: 0
  required: false
  section: Collect
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
description: Autonomous detection and investigation of information security incidents and other potential threats.
display: Cognni
name: Cognni
script:
  commands:
  - arguments:
    - description: The ID of the event to fetch.
      name: event_id
      required: true
    description: Fetches a single event by ID.
    name: cognni-get-event
    outputs:
    - contextPath: Cognni.Event.id
      description: Event ID.
      type: String
    - contextPath: Cognni.Event.date
      description: The date when the event occurred.
      type: Date
    - contextPath: Cognni.Event.description
      description: Description of the event.
      type: String
    - contextPath: Cognni.Event.severity
      description: Severity of the event.
      type: Number
    - contextPath: Cognni.Event.sourceApplication
      description: The ID of the application which initiated the event.
      type: String
  - arguments:
    - description: The ID of the insight to fetch.
      name: insight_id
      required: true
    description: Fetches a single insight by ID.
    name: cognni-get-insight
    outputs:
    - contextPath: Cognni.insight.id
      description: Insight ID.
      type: String
    - contextPath: Cognni.insight.name
      description: Name of the insight.
      type: String
    - contextPath: Cognni.insight.description
      description: Description of the insight.
      type: String
    - contextPath: Cognni.insight.severity
      description: Severity of the insight.
      type: Number
  - arguments:
    - defaultValue: '2'
      description: Minimum severity of insights to fetch.
      name: min_severity
      required: true
    description: Fetches insights according to severity.
    name: cognni-fetch-insights
    outputs:
    - contextPath: Cognni.insights.id
      description: List of insight IDs.
      type: String
    - contextPath: Cognni.insights.name
      description: List of insight names.
      type: String
    - contextPath: Cognni.insights.description
      description: List of insight descriptions.
      type: String
    - contextPath: Cognni.insights.severity
      description: List of insight severities.
      type: Number
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
fromversion: 5.0.0