Skip to main content

VerifyEnoughIncidents

This Script is part of the Developer Tools Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Check whether a given query returns enough incidents.

Script Data#


NameDescription
Script Typepython3
Tags
Cortex XSOAR Version6.0.0

Inputs#


Argument NameDescription
queryQuery used to check whether there are sufficient incidents in Cortex XSOAR.
sizeThe amount of incidents in which to check.

Outputs#


PathDescriptionType
IncidentsCheck.SizeThe number of incidents in Cortex XSOAR that is expected to match the query.number
IncidentsCheck.ConditionMetWhether there are sufficient incidents in Cortex XSOAR that match the query.boolean
IncidentsCheck.QueryThe incidents query which was used to check if the condition was met.boolean

Script Example#

!VerifyEnoughIncidents query="sourceInstance:Some_Integration_instance_1" size="1"

Context Example#

{
"IncidentsCheck": {
"ConditionMet": true,
"Query": "sourceInstance:Some_Integration_instance_1",
"Size": 1
}
}

Human Readable Output#

Results#

ConditionMetQuerySize
truesourceInstance:Some_Integration_instance_11