Skip to main content

Cortex XDR - Check Action Status

This Playbook is part of the Palo Alto Networks Cortex XDR - Investigation and Response Pack.#

Checks the action status of an action ID. \nEnter the action ID of the action whose status you want to know.

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • GenericPolling

Integrations#

  • CortexXDRIR

Scripts#

  • PrintErrorEntry

Commands#

  • xdr-action-status-get

Playbook Inputs#


NameDescriptionDefault ValueRequired
action_idAction ID of the specific request.Optional
timeoutAmount of time to poll before declaring a timeout and resuming the playbook (in minutes).Optional

Playbook Outputs#


PathDescriptionType
PaloAltoNetworksXDR.GetActionStatusGets Action Status command results.unknown
PaloAltoNetworksXDR.GetActionStatus.endpoint_idEndpoint ID.string
PaloAltoNetworksXDR.GetActionStatus.statusStatus of specific endpoint ID.string
PaloAltoNetworksXDR.GetActionStatus.action_idThe action ID that was the input.number