Skip to main content


This Script is part of the Integrations & Incidents Health Check Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Gets failed tasks details for incidents based on a query. Limited to 1000 incidents


This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here:

Script Data#

Script Typepython3
Cortex XSOAR Version6.0.0

Used In#

This script is used in the following playbooks and scripts.

  • Integrations and Playbooks Health Check - Running Scripts


Argument NameDescription
queryThe query by which to retrieve failed tasks. Optional. The default value is "-status:closed"
tenant_nameThe tenant name.
max_incidentsMaximum number of incidents to query. Maximum is 1000.


There are no outputs for this script.


In order for the automation script to be able to retrieve the failed tasks, the API key configured in the Demisto REST API integration, need to be of a user with Read permissions to the queried incident.