Skip to main content


This Script is part of the Integrations & Incidents Health Check Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Gets failed tasks details for incidents based on a query. Limited to 1000 incidents


This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here:

Script Data#

Script Typepython3
Cortex XSOAR Version6.0.0

Used In#

This script is used in the following playbooks and scripts.

  • Integrations and Playbooks Health Check - Running Scripts


Argument NameDescription
queryThe query by which to retrieve failed tasks. Optional. The default value is "-status:closed"
rest_api_instanceThe Rest API instance to use.
max_incidentsMaximum number of incidents to query. Maximum is 1000.


There are no outputs for this script.


Multi-tenant environments should be configured with the Cortex Rest API instance when using this automation. Make sure the Use tenant parameter (in the Cortex Rest API integration) is checked to ensure that API calls are made to the current tenant instead of the master tenant.