category: Database
provider: Snowflake
sectionorder:
- Connect
- Collect
commonfields:
  id: Snowflake
  version: -1
configuration:
- display: Account - See Detailed Description section.
  name: account
  required: true
  type: 0
  section: Connect
- display: Username
  name: credentials
  required: false
  type: 9
  section: Connect
- display: Region (only if you are not US West)
  name: region
  type: 0
  required: false
  section: Connect
- display: Authenticator - See Detailed Description section.
  name: authenticator
  type: 0
  required: false
  section: Connect
- display: Default warehouse to use
  name: warehouse
  required: true
  type: 0
  section: Connect
- display: Default database to use
  name: database
  required: true
  type: 0
  section: Connect
- display: Default schema to use
  name: schema
  type: 0
  required: false
  section: Connect
- display: Default role to use
  name: role
  type: 0
  required: false
  section: Connect
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
  section: Connect
  advanced: true
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
  section: Connect
  advanced: true
- display: Client ID
  name: oauth_client_id
  type: 0
  required: false
  section: Connect
  additionalinfo: The OAuth client ID issued by the IdP (e.g., Okta, Entra ID). Required when using External OAuth authentication.
- displaypassword: Client Secret
  name: oauth_client_secret
  hiddenusername: true
  type: 9
  required: false
  section: Connect
  additionalinfo: The OAuth client secret issued by the IdP. Required when using External OAuth authentication.
- display: OAuth Token URL
  name: oauth_token_url
  type: 0
  required: false
  section: Connect
  additionalinfo: "The IdP token endpoint URL, e.g., https://<tenant>.okta.com/oauth2/<authServerId>/v1/token. Required when using External OAuth authentication."
- display: OAuth Scope
  name: oauth_scope
  type: 0
  required: false
  section: Connect
  additionalinfo: "The Snowflake OAuth scope. When multiple scopes are required, provide a comma-separated list. e.g., session:role:analyst,session:role:reader. See https://docs.snowflake.com/en/user-guide/oauth-ext-overview#scopes for details."
- display: Fetch incidents
  name: isFetch
  type: 8
  required: false
  section: Collect
- display: Fetch query to retrieve new incidents. This field is mandatory when 'Fetches incidents' is set to true.
  name: fetch_query
  type: 0
  required: false
  section: Collect
- defaultvalue: 24 hours
  display: First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
  name: fetch_time
  type: 0
  required: false
  section: Collect
- display: The name of the field/column that contains the datetime object or timestamp for the data being fetched (case sensitive). This field is mandatory when 'Fetches incidents' is set to true.
  name: datetime_column
  type: 0
  required: false
  section: Collect
- display: The name of the field/column in the fetched data from which the name for the demisto incident will be assigned (case sensitive)
  name: incident_name_column
  type: 0
  required: false
  section: Collect
- defaultvalue: '10000'
  display: The maximum number of rows to be returned by a fetch
  name: limit
  type: 0
  required: false
  section: Collect
- display: Incident type
  name: incidentType
  type: 13
  required: false
  section: Collect
- display: Incidents Fetch Interval
  name: incidentFetchInterval
  defaultvalue: '1'
  required: false
  type: 19
  section: Collect
  advanced: true
description: Analytic data warehouse provided as Software-as-a-Service.
display: Snowflake
name: Snowflake
script:
  commands:
  - arguments:
    - default: true
      description: The query to execute.
      name: query
      required: true
    - description: The warehouse to use for the query. If not specified, the default will be used.
      name: warehouse
    - description: The database to use for the query. If not specified, the default will be used.
      name: database
    - description: The schema to use for the query. If not specified, the default will be used.
      name: schema
    - description: The role to use for the query. If not specified, the default will be used.
      name: role
    - defaultValue: '100'
      description: The number of rows to retrieve.
      name: limit
    - description: 'A CSV list of columns to display in the specified order, for example: "Name, ID, Timestamp".'
      isArray: true
      name: columns
    description: Executes a SELECT query and retrieve the data.
    execution: true
    name: snowflake-query
    outputs:
    - contextPath: Snowflake.Query
      description: The query used to fetch results from the database.
      type: String
    - contextPath: Snowflake.Result
      description: Results from querying the database.
      type: Unknown
    - contextPath: Snowflake.Database
      description: The name of the database object.
      type: String
    - contextPath: Snowflake.Schema
      description: The name of the schema object.
      type: String
  - arguments:
    - default: true
      description: The command to execute.
      name: db_operation
      required: true
    - description: The warehouse to use for the query. If not specified, the default will be used.
      name: warehouse
    - description: The database to use for the query. If not specified, the default will be used.
      name: database
    - description: The schema to use for the query. If not specified, the default will be used.
      name: schema
    - description: The role to use for the query. If not specified, the default will be used.
      name: role
    description: Makes a DML change in the database.
    execution: true
    name: snowflake-update
  dockerimage: demisto/snowflake:1.0.0.10238860
  isfetch: true
  script: '-'
  type: python
  subtype: python3
tests:
- Snowflake-Test
fromversion: 5.0.0