Skip to content

Commit

Permalink
Add Incidents Fetch Interval configuration parameter (#1396)
Browse files Browse the repository at this point in the history
* Add Incidents Fetch Interval

* New screenshot for Incident Fetch Interval param
  • Loading branch information
ShirleyDenkberg authored Sep 20, 2023
1 parent 4a904ce commit 634c105
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 2 deletions.
Binary file added docs/doc_imgs/integrations/fetch-incidents.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
9 changes: 7 additions & 2 deletions docs/integrations/fetching-incidents.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,11 @@ This topic provides:
- Troubleshooting tips

## fetch-incidents Command
The ***fetch-incidents*** command is the function that Cortex XSOAR calls every minute to import new incidents. It is triggered by the *Fetches incidents* parameter in the integration configuration. It is not necessary to configure the ***fetch-incidents*** command in the integration settings.
The ***fetch-incidents*** command is the function that Cortex XSOAR calls to import new incidents. It is triggered by the *Fetches incidents* parameter in the integration configuration. It is not necessary to configure the ***fetch-incidents*** command in the integration settings.

![screen shot 2019-01-07 at 15 35 01](/doc_imgs/integrations/50771147-6aedb800-1292-11e9-833f-b5dd13e3507b.png)
When you select the the *Fetch incidents* parameter in the integration configuration, you should also configure the *Incidents Fetch Interval* parameter. This controls how often the integration will perform a ***fetch_incidents*** command. The default is 1 minute.

![screen shot 2023-09-20](/doc_imgs/integrations/fetch-incidents.png)

Open the ***fetch-incidents*** command. Make sure the command is also referenced in the execution block.

Expand All @@ -28,6 +30,9 @@ if demisto.command() == 'fetch-incidents':

```




## Last Run
The *demisto.getLastRun()* function retrieves the last previous run time.
This helps avoid duplicate incidents by fetching only events that occurred since the last time the function was run.
Expand Down

0 comments on commit 634c105

Please sign in to comment.