Skip to main content

findIncidentsWithIndicator

This Script is part of the Common Scripts Pack.#

Looks up incidents with a specified indicator. Uses currentIncidentId to omit the existing incident from output.

Permissions#


This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html

Script Data#


NameDescription
Script Typejavascript
TagsUtility

Inputs#


Argument NameDescription
indicatorThe indicator to search for.

Outputs#


PathDescriptionType
IncidentsWithIndicator.IndicatorThe indicator that was found in other incidents.Unknown
IncidentsWithIndicator.incidentIDsThe incident IDs that the indicator was found in.Unknown