category: Utilities
provider: Logpoint
commonfields:
  id: LogPoint SIEM Integration
  version: -1
configuration:
- display: LogPoint URL
  name: url
  required: true
  type: 0
- display: LogPoint Username
  name: username
  required: true
  type: 0
- additionalinfo: User's secret key
  display: API Key
  name: apikey
  required: true
  type: 4
- additionalinfo: Whether to allow connections without verifying SSL certificates validity.
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- additionalinfo: Whether to use XSOAR’s system proxy settings to connect to the API
  display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- additionalinfo: If it is not provided, incidents from past 24 hours will be fetched by default.
  defaultvalue: 1 day
  display: First fetch timestamp (<number> <time unit>, e.g., 6 hours, 1 day)
  name: first_fetch
  type: 0
  required: false
- display: Incident type
  name: incidentType
  type: 13
  required: false
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
- additionalinfo: If this is left blank, maximum 50 incidents will be fetched at a time.
  defaultvalue: '50'
  display: Fetch limit (Max value is 200, Recommended value is 50 or less)
  name: max_fetch
  type: 0
  required: false
- defaultvalue: '1'
  display: Incidents Fetch Interval
  name: incidentFetchInterval
  required: false
  type: 19
description: Use this Content Pack to search logs, fetch incident logs from LogPoint, analyze them for underlying threats, and respond to these threats in real-time.
display: LogPoint SIEM Integration
name: LogPoint SIEM Integration
script:
  commands:
  - arguments:
    - description: From Timestamp.
      name: ts_from
    - description: To Timestamp.
      name: ts_to
    - description: Number of incidents to fetch. Accepts integer value.
      name: limit
    description: Displays incidents between the provided two Timestamps ts_from and ts_to. By default, this command will display first 50 incidents of the past 24 hours but limit can be set to get desired number of incidents.
    name: lp-get-incidents
    outputs:
    - contextPath: LogPoint.Incidents.name
      description: LogPoint Incident Name.
      type: String
    - contextPath: LogPoint.Incidents.type
      description: LogPoint Incident Type.
      type: String
    - contextPath: LogPoint.Incidents.incident_id
      description: LogPoint Incident ID.
      type: String
    - contextPath: LogPoint.Incidents.assigned_to
      description: LogPoint Incidents Assigned To.
      type: String
    - contextPath: LogPoint.Incidents.status
      description: LogPoint Incidents Status.
      type: String
    - contextPath: LogPoint.Incidents.id
      description: LogPoint Incident Object ID.
      type: String
    - contextPath: LogPoint.Incidents.detection_timestamp
      description: LogPoint Incidents Detection Timestamp.
      type: Number
    - contextPath: LogPoint.Incidents.username
      description: LogPoint Incident Username.
      type: String
    - contextPath: LogPoint.Incidents.user_id
      description: LogPoint Incidents User ID.
      type: String
    - contextPath: LogPoint.Incidents.assigned_to
      description: LogPoint Incidents Assigned To.
      type: String
    - contextPath: LogPoint.Incidents.visible_to
      description: LogPoint Incidents Visible To.
      type: String
    - contextPath: LogPoint.Incidents.tid
      description: LogPoint Incidents Tid.
      type: String
    - contextPath: LogPoint.Incidents.rows_count
      description: LogPoint Incidents Rows Count.
      type: String
    - contextPath: LogPoint.Incidents.risk_level
      description: LogPoint Incidents Risk Level.
      type: String
    - contextPath: LogPoint.Incidents.detection_timestamp
      description: LogPoint Incidents Detection Timestamp.
      type: String
    - contextPath: LogPoint.Incidents.loginspect_ip_dns
      description: LogPoint Incidents Loginspect IP DNS.
      type: String
    - contextPath: LogPoint.Incidents.status
      description: LogPoint Incidents Status.
      type: String
    - contextPath: LogPoint.Incidents.comments
      description: LogPoint Incidents Comments.
      type: String
    - contextPath: LogPoint.Incidents.commentscount
      description: LogPoint Incidents Comments Count.
      type: Number
    - contextPath: LogPoint.Incidents.query
      description: LogPoint Incidents Query.
      type: String
    - contextPath: LogPoint.Incidents.repos
      description: LogPoint Incidents Repos.
      type: String
    - contextPath: LogPoint.Incidents.time_range
      description: LogPoint Incidents Time Range.
      type: String
    - contextPath: LogPoint.Incidents.alert_obj_id
      description: LogPoint Incidents Alert Obj Id.
      type: String
    - contextPath: LogPoint.Incidents.throttle_enabled
      description: LogPoint Incidents Throttle Enabled.
      type: Boolean
    - contextPath: LogPoint.Incidents.lastaction
      description: LogPoint Incidents Last Action.
      type: String
    - contextPath: LogPoint.Incidents.description
      description: LogPoint Incidents Description.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command.
      name: incident_obj_id
      required: true
    - description: Incident Id of a particular incident. It is the value contained in 'incident_id' key of the incidents obtained from 'lp-get-incidents' command.
      name: incident_id
      required: true
    - description: Incident Detection TImestamp. It is the value contained in 'detection_timestamp' key of the incidents obtained from 'lp-get-incidents' command.
      name: date
      required: true
    description: Retrieves a Particular Incident's Data.
    name: lp-get-incident-data
    outputs:
    - contextPath: LogPoint.Incidents.data.use
      description: LogPoint Incidents Data Use.
      type: String
    - contextPath: LogPoint.Incidents.data.used
      description: LogPoint Incidents Data Used.
      type: String
    - contextPath: LogPoint.Incidents.data.log_ts
      description: LogPoint Incidents Data Log Ts.
      type: Number
    - contextPath: LogPoint.Incidents.data._type_str
      description: LogPoint Incidents Data Type Str.
      type: String
    - contextPath: LogPoint.Incidents.data.msg
      description: LogPoint Incidents Data Msg.
      type: String
    - contextPath: LogPoint.Incidents.data.total
      description: LogPoint Incidents Data Total.
      type: String
    - contextPath: LogPoint.Incidents.data.device_name
      description: LogPoint Incidents Data Device Name.
      type: String
    - contextPath: LogPoint.Incidents.data._offset
      description: LogPoint Incidents Data Offset.
      type: String
    - contextPath: LogPoint.Incidents.data.logpoint_name
      description: LogPoint Incidents Data LogPoint Name.
      type: String
    - contextPath: LogPoint.Incidents.data.repo_name
      description: LogPoint Incidents Data Repo Name.
      type: String
    - contextPath: LogPoint.Incidents.data.free
      description: LogPoint Incidents Data Free.
      type: String
    - contextPath: LogPoint.Incidents.data.source_name
      description: LogPoint Incidents Data Source Name.
      type: String
    - contextPath: LogPoint.Incidents.data.col_ts
      description: LogPoint Incidents Data Col Ts.
      type: Number
    - contextPath: LogPoint.Incidents.data._tz
      description: LogPoint Incidents Data Tz.
      type: String
    - contextPath: LogPoint.Incidents.data.norm_id
      description: LogPoint Incidents Data Norm Id.
      type: String
    - contextPath: LogPoint.Incidents.data._identifier
      description: LogPoint Incidents Data Identifier.
      type: String
    - contextPath: LogPoint.Incidents.data.collected_at
      description: LogPoint Incidents Data Collected At.
      type: String
    - contextPath: LogPoint.Incidents.data.device_ip
      description: LogPoint Incidents Data Device IP.
      type: String
    - contextPath: LogPoint.Incidents.data._fromV550
      description: LogPoint Incidents Data From V550.
      type: String
    - contextPath: LogPoint.Incidents.data._enrich_policy
      description: LogPoint Incidents Data Enrich Policy.
      type: String
    - contextPath: LogPoint.Incidents.data._type_num
      description: LogPoint Incidents Data Type Num.
      type: String
    - contextPath: LogPoint.Incidents.data._type_ip
      description: LogPoint Incidents Data Type IP.
      type: String
    - contextPath: LogPoint.Incidents.data.sig_id
      description: LogPoint Incidents Data Sig Id.
      type: String
    - contextPath: LogPoint.Incidents.data.col_type
      description: LogPoint Incidents Data Col Type.
      type: String
    - contextPath: LogPoint.Incidents.data.object
      description: LogPoint Incidents Data Object.
      type: String
    - contextPath: LogPoint.Incidents.data._labels
      description: LogPoint Incidents Data Labels.
      type: String
    - contextPath: LogPoint.Incidents.data.source_address
      description: Source Address.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_address
      description: Destination Address.
      type: String
    - contextPath: LogPoint.Incidents.data.workstation
      description: Workstation.
      type: String
    - contextPath: LogPoint.Incidents.data.domain
      description: Domain.
      type: String
    - contextPath: LogPoint.Incidents.data.user
      description: User.
      type: String
    - contextPath: LogPoint.Incidents.data.caller_user
      description: Caller User.
      type: String
    - contextPath: LogPoint.Incidents.data.target_user
      description: Target User.
      type: String
    - contextPath: LogPoint.Incidents.data.source_machine_id
      description: Source Machie Id.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_machine_id
      description: Destination Machine Id.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_port
      description: Destination Port.
      type: String
    - contextPath: LogPoint.Incidents.data.event_type
      description: Event Type.
      type: String
    - contextPath: LogPoint.Incidents.data.share_path
      description: Share Path.
      type: String
    - contextPath: LogPoint.Incidents.data.object_name
      description: Object Name.
      type: String
    - contextPath: LogPoint.Incidents.data.sub_status_code
      description: Sub Status Code.
      type: String
    - contextPath: LogPoint.Incidents.data.object_type
      description: Object Type.
      type: String
    - contextPath: LogPoint.Incidents.data.request_method
      description: Request Method.
      type: String
    - contextPath: LogPoint.Incidents.data.status_code
      description: Status Code.
      type: String
    - contextPath: LogPoint.Incidents.data.received_datasize
      description: Received Datasize.
      type: String
    - contextPath: LogPoint.Incidents.data.received_packet
      description: Received Packet.
      type: String
    - contextPath: LogPoint.Incidents.data.user_agent
      description: User Agent.
      type: String
    - contextPath: LogPoint.Incidents.data.sent_datasize
      description: Sent Datasize.
      type: String
    - contextPath: LogPoint.Incidents.data.sender
      description: Sender.
      type: String
    - contextPath: LogPoint.Incidents.data.receiver
      description: Receiver.
      type: String
    - contextPath: LogPoint.Incidents.data.datasize
      description: Datasize.
      type: String
    - contextPath: LogPoint.Incidents.data.file
      description: File.
      type: String
    - contextPath: LogPoint.Incidents.data.subject
      description: Subject.
      type: String
    - contextPath: LogPoint.Incidents.data.status
      description: Status.
      type: String
    - contextPath: LogPoint.Incidents.data.file_count
      description: File Count.
      type: String
    - contextPath: LogPoint.Incidents.data.protocol_id
      description: Protocol Id.
      type: String
    - contextPath: LogPoint.Incidents.data.sent_packet
      description: Sent Packet.
      type: String
    - contextPath: LogPoint.Incidents.data.service
      description: Service.
      type: String
    - contextPath: LogPoint.Incidents.data.printer
      description: Printer.
      type: String
    - contextPath: LogPoint.Incidents.data.print_count
      description: Print Count.
      type: String
    - contextPath: LogPoint.Incidents.data.event_id
      description: Event Id.
      type: String
    - contextPath: LogPoint.Incidents.data.country_name
      description: Country Name.
      type: String
    - contextPath: LogPoint.Incidents.data.host
      description: Host.
      type: String
    - contextPath: LogPoint.Incidents.data.hash
      description: Hash.
      type: String
    - contextPath: LogPoint.Incidents.data.hash_sha1
      description: Hash SHA1.
      type: String
    - contextPath: LogPoint.Incidents.data.agent_address
      description: Agent Address.
      type: String
    - contextPath: LogPoint.Incidents.data.attacker_address
      description: Attacker Address.
      type: String
    - contextPath: LogPoint.Incidents.data.broadcast_address
      description: Broadcast Address.
      type: String
    - contextPath: LogPoint.Incidents.data.client_address
      description: Client Address.
      type: String
    - contextPath: LogPoint.Incidents.data.client_hardware_address
      description: Client Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_hardware_address
      description: Destination Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_nat_address
      description: Destination NAT Address.
      type: String
    - contextPath: LogPoint.Incidents.data.device_address
      description: Device Address.
      type: String
    - contextPath: LogPoint.Incidents.data.external_address
      description: External Address.
      type: String
    - contextPath: LogPoint.Incidents.data.gateway_address
      description: Gateway Address.
      type: String
    - contextPath: LogPoint.Incidents.data.hardware_address
      description: Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.host_address
      description: Host Address.
      type: String
    - contextPath: LogPoint.Incidents.data.interface_address
      description: Interface Address.
      type: String
    - contextPath: LogPoint.Incidents.data.lease_address
      description: Lease Address.
      type: String
    - contextPath: LogPoint.Incidents.data.local_address
      description: Local Address.
      type: String
    - contextPath: LogPoint.Incidents.data.nas_address
      description: Nas ddress.
      type: String
    - contextPath: LogPoint.Incidents.data.nas_ipv6_address
      description: Nas_IPV6 Address.
      type: String
    - contextPath: LogPoint.Incidents.data.nat_address
      description: NAT Address.
      type: String
    - contextPath: LogPoint.Incidents.data.nat_source_address
      description: NAT Source Address.
      type: String
    - contextPath: LogPoint.Incidents.data.network_address
      description: Network Address.
      type: String
    - contextPath: LogPoint.Incidents.data.new_hardware_address
      description: New Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.old_hardware_address
      description: Old Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.original_address
      description: Original Address.
      type: String
    - contextPath: LogPoint.Incidents.data.original_client_address
      description: Original Client Address.
      type: String
    - contextPath: LogPoint.Incidents.data.original_destination_address
      description: Original Destination Address.
      type: String
    - contextPath: LogPoint.Incidents.data.original_server_address
      description: Original Server Address.
      type: String
    - contextPath: LogPoint.Incidents.data.original_source_address
      description: Original Source Address.
      type: String
    - contextPath: LogPoint.Incidents.data.originating_address
      description: Originating Address.
      type: String
    - contextPath: LogPoint.Incidents.data.peer_address
      description: Peer Address.
      type: String
    - contextPath: LogPoint.Incidents.data.private_address
      description: Private Address.
      type: String
    - contextPath: LogPoint.Incidents.data.proxy_address
      description: Proxy Address.
      type: String
    - contextPath: LogPoint.Incidents.data.proxy_source_address
      description: Proxy Source Address.
      type: String
    - contextPath: LogPoint.Incidents.data.relay_address
      description: Relay Address.
      type: String
    - contextPath: LogPoint.Incidents.data.remote_address
      description: Remote Address.
      type: String
    - contextPath: LogPoint.Incidents.data.resolved_address
      description: Resolved Address.
      type: String
    - contextPath: LogPoint.Incidents.data.route_address
      description: Route Address.
      type: String
    - contextPath: LogPoint.Incidents.data.scanner_address
      description: Scanner Address.
      type: String
    - contextPath: LogPoint.Incidents.data.server_address
      description: Server Address.
      type: String
    - contextPath: LogPoint.Incidents.data.server_hardware_address
      description: Server Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.source_hardware_address
      description: Source Hardware Address.
      type: String
    - contextPath: LogPoint.Incidents.data.start_address
      description: Start Address.
      type: String
    - contextPath: LogPoint.Incidents.data.supplier_address
      description: Supplier Address.
      type: String
    - contextPath: LogPoint.Incidents.data.switch_address
      description: Switch Address.
      type: String
    - contextPath: LogPoint.Incidents.data.translated_address
      description: Translated Address.
      type: String
    - contextPath: LogPoint.Incidents.data.virtual_address
      description: Virtual Address.
      type: String
    - contextPath: LogPoint.Incidents.data.virtual_server_address
      description: Virtual Server Address.
      type: String
    - contextPath: LogPoint.Incidents.data.vpn_address
      description: VPN Address.
      type: String
    - contextPath: LogPoint.Incidents.data.hash_length
      description: Hash Length.
      type: String
    - contextPath: LogPoint.Incidents.data.hash_sha256
      description: Hash SHA256.
      type: String
    - contextPath: LogPoint.Incidents.data.alternate_user
      description: Alternate User.
      type: String
    - contextPath: LogPoint.Incidents.data.authenticated_user
      description: Authenticated User.
      type: String
    - contextPath: LogPoint.Incidents.data.authorized_user
      description: Authorized User.
      type: String
    - contextPath: LogPoint.Incidents.data.certificate_user
      description: Certificate User.
      type: String
    - contextPath: LogPoint.Incidents.data.current_user
      description: Current User.
      type: String
    - contextPath: LogPoint.Incidents.data.database_user
      description: Database User.
      type: String
    - contextPath: LogPoint.Incidents.data.destination_user
      description: Destination User.
      type: String
    - contextPath: LogPoint.Incidents.data.logon_user
      description: Logon User.
      type: String
    - contextPath: LogPoint.Incidents.data.new_max_user
      description: New Max User.
      type: String
    - contextPath: LogPoint.Incidents.data.new_user
      description: New User.
      type: String
    - contextPath: LogPoint.Incidents.data.old_max_user
      description: Old Max User.
      type: String
    - contextPath: LogPoint.Incidents.data.os_user
      description: OS User.
      type: String
    - contextPath: LogPoint.Incidents.data.remote_user
      description: Remote User.
      type: String
    - contextPath: LogPoint.Incidents.data.source_user
      description: Source User.
      type: String
    - contextPath: LogPoint.Incidents.data.system_user
      description: System User.
      type: String
    - contextPath: LogPoint.Incidents.data.target_logon_user
      description: Target Logon User.
      type: String
    - contextPath: LogPoint.Incidents.data.zone_user
      description: Zone User.
      type: String
  - arguments:
    - description: From Timestamp.
      name: ts_from
    - description: To Timestamp.
      name: ts_to
    - description: Number of incident states data to fetch. Accepts integer value.
      name: limit
    description: Displays incident states data between the provided two Timestamps ts_from and ts_to. By default, this command will display first 50 data of the past 24 hours but limit can be set to get desired number of incident states data.
    name: lp-get-incident-states
    outputs:
    - contextPath: LogPoint.Incidents.states.id
      description: LogPoint Incidents States Id.
      type: String
    - contextPath: LogPoint.Incidents.states.status
      description: LogPoint Incidents States Status.
      type: String
    - contextPath: LogPoint.Incidents.states.assigned_to
      description: LogPoint Incidents States Assigned To.
      type: String
    - contextPath: LogPoint.Incidents.states.comments
      description: LogPoint Incidents States Comments.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command.
      name: incident_obj_id
      required: true
    - description: Comment to be added to the incidents.
      name: comment
      required: true
    description: Add comments to the incidents.
    name: lp-add-incident-comment
    outputs:
    - contextPath: LogPoint.Incidents.comment
      description: LogPoint Incidents Comment.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command. Multiple id can be provided by separating them using comma.
      isArray: true
      name: incident_obj_ids
      required: true
    - description: Id of the user whom the incidents are assigned.  It can be displayed using 'lp-get-users' command.
      name: new_assignee
      required: true
    description: Assigning/Re-assigning Incidents.
    name: lp-assign-incidents
    outputs:
    - contextPath: LogPoint.Incidents.assign
      description: LogPoint Incidents Assign.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command. Multiple id can be provided by separating them using comma.
      isArray: true
      name: incident_obj_ids
      required: true
    description: Resolves the Incidents.
    name: lp-resolve-incidents
    outputs:
    - contextPath: LogPoint.Incidents.resolve
      description: LogPoint Incidents Resolve.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command. Multiple id can be provided by separating them using comma.
      isArray: true
      name: incident_obj_ids
      required: true
    description: Closes the Incidents.
    name: lp-close-incidents
    outputs:
    - contextPath: LogPoint.Incidents.close
      description: LogPoint Incidents Close.
      type: String
  - arguments:
    - description: Object ID of a particular incident. It is the value contained in 'id' key of the incidents obtained from 'lp-get-incidents' command. Multiple id can be provided by separating them using comma.
      isArray: true
      name: incident_obj_ids
      required: true
    description: Re-opens the closed incidents.
    name: lp-reopen-incidents
    outputs:
    - contextPath: LogPoint.Incidents.reopen
      description: LogPoint Incidents Reopen.
      type: String
  - description: Gets Incident users and user groups.
    name: lp-get-users
    outputs:
    - contextPath: LogPoint.Incidents.users.id
      description: LogPoint Incidents Users Id.
      type: String
    - contextPath: LogPoint.Incidents.users.name
      description: LogPoint Incidents Users Name.
      type: String
    - contextPath: LogPoint.Incidents.users.usergroups
      description: LogPoint Incidents Users Usergroups.
      type: String
    arguments: []
  - description: Gets LogPoint user's preference such as timezone, date format, etc.
    name: lp-get-users-preference
    outputs:
    - contextPath: LogPoint.User.Preference.timezone
      description: LogPoint user's timezone.
      type: String
    - contextPath: LogPoint.User.Preference.date_format
      description: LogPoint user's date format.
      type: String
    - contextPath: LogPoint.User.Preference.hour_format
      description: LogPoint user's hour format.
      type: String
    arguments: []
  - description: Gets user's LogPoints.
    name: lp-get-logpoints
    outputs:
    - contextPath: LogPoint.LogPoints.name
      description: LogPoint name.
      type: String
    - contextPath: LogPoint.LogPoints.ip
      description: LogPoint's IP address.
      type: String
    arguments: []
  - description: Gets the list of LogPoint repos that can be accessed by the user.
    name: lp-get-repos
    outputs:
    - contextPath: LogPoint.Repos.repo
      description: LogPoint repo name.
      type: String
    - contextPath: LogPoint.Repos.address
      description: LogPoint repo address.
      type: String
    arguments: []
  - description: Gets devices associated with LogPoint.
    name: lp-get-devices
    outputs:
    - contextPath: LogPoint.Devices.name
      description: Device name.
      type: String
    - contextPath: LogPoint.Devices.address
      description: Device IP address.
      type: String
    arguments: []
  - description: Gets live search results of the alerts and dashboards.
    name: lp-get-livesearches
    outputs:
    - contextPath: LogPoint.LiveSearches.generated_by
      description: Who generated the live search.
      type: String
    - contextPath: LogPoint.LiveSearches.searchname
      description: The name of the live search.
      type: String
    - contextPath: LogPoint.LiveSearches.description
      description: A description of the live search.
      type: String
    - contextPath: LogPoint.LiveSearches.query
      description: The live search query.
      type: String
    arguments: []
  - arguments:
    - description: LogPoint search query. This should be the exact query to use to search logs in the LogPoint UI.
      name: query
      required: true
    - defaultValue: Last 5 minutes
      description: 'Time range. For example: Last 30 minutes, Last 7 days, etc. If not provided, it will use "Last 5 minutes" as the time range by default.'
      name: time_range
    - defaultValue: '100'
      description: Number of logs to fetch. If not provided, the first 100 logs will be displayed.
      name: limit
    - description: A comma-separated list of LogPoint repos from which logs are to be fetched. If not provided, it will display logs from all repos.
      isArray: true
      name: repos
    - defaultValue: '60'
      description: LogPoint search timeout in seconds.
      name: timeout
    description: Gets the search ID based on the provided search parameters.
    name: lp-get-searchid
    outputs:
    - contextPath: LogPoint.search_id
      description: Search ID. Use this ID in the lp-search-logs command to get the search result.
      type: String
  - arguments:
    - description: Search ID obtained from the lp-get-searchid command.
      name: search_id
      required: true
    description: Gets LogPoint search results. Uses the value of search_id as an argument.
    name: lp-search-logs
    outputs:
    - contextPath: LogPoint.SearchLogs
      description: Search results.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  isfetch: true
  runonce: false
  script: ''
  subtype: python3
  type: python
tests:
- LogPoint SIEM Integration - Test Playbook 1
- LogPoint SIEM Integration - Test Playbook 2
- LogPoint SIEM Integration - Test Playbook 3
defaultmapperin: LogPoint SIEM Integration - Incoming Mapper
fromversion: 6.0.0