Skip to main content


This Script is part of the Common Scripts Pack.#

Copy a context key to an incident field of multiple incidents, based on an incident query.

This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here:

Script Data#

Script Typepython2
Cortex XSOAR Version5.0.0


Argument NameDescription
sourceContextKeyThe context key from which to get the value.
targetIncidentFieldThe incident field to set with the value.
incidentsQueryThe incidents query on which to apply the copy process. For example, to apply this to all incidents of type "Phishing", use the query: "type:Phishing".
limitThe maximum number of incidents to edit. Default is 1,000.
listSeparatorConcatenates list values.


There are no outputs for this script.