Supported Cortex XSOAR versions: 6.2.0 and later.
Train clustering model on Cortex XDR incident type.
|Cortex XSOAR Version
|The type of the widget to return.
|The start date by which to filter incidents. Date format will be the same as in the incidents query page, for example: "3 days ago", ""2019-01-01T00:00:00 +0200").
|The maximum number of incidents to fetch
|The Cortex XDR incident type
|Input search query from the dashboard
|Period of time (in hours) before retraining the model. Default is "24".
|Determines whether to force the model to re-train. Default is "False".
|Comma-separated list of additional incident fields to display, but which will not be taken into account when computing similarity.
There are no outputs for this script.