Skip to main content

HashIncidentsFields

This Script is part of the Machine Learning Pack.#

Hash fields from the incident list. Search for incidents by arguments with an option to hash some of its fields.

Script Data#


NameDescription
Script Typepython3
Tagsincidents, ml
Cortex XSOAR Version5.0.0

Inputs#


Argument NameDescription
queryAdditional text by which to query incidents.
incidentTypesA comma-separated list of incident types by which to filter.
fromDateThe start date by which to filter incidents. Date format will be the same as in the incidents query page, for example: "3 days ago", ""2019-01-01T00:00:00 +0200").
toDateThe end date by which to filter incidents. Date format will be the same as in the incidents query page, for example: "3 days ago", ""2019-01-01T00:00:00 +0200").
limitThe maximum number of incidents to fetch. The default value is 3000.
timeFieldThe incident field to specify for the date range. Can be "created" or "modified". The default is "created".
NonEmptyFieldsA comma-separated list of non-empty value incident field names by which to filter incidents.
outputFormatThe output file format.
populateFieldsA comma-separated list of fields in the object to poplulate.
fieldsToHashA comma-separated list of fields to hash. Support wildcards.
contextKeysA comma-separated list of context keys to keep.
removeLabelsRemove incident labels
unPopulateFieldsA comma-separated list of fields in the object to un-poplulate.
addRandomSaltRandom salt to the hash function

Outputs#


PathDescriptionType
HashIncidentsFields.FilenameThe output file name.String
HashIncidentsFields.FileFormatThe output file format.String