Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Incidents Fetch Interval configuration parameter #1396

Merged
merged 2 commits into from
Sep 20, 2023
Merged

Add Incidents Fetch Interval configuration parameter #1396

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b1f67bf
Add Incidents Fetch Interval
ShirleyDenkberg Sep 20, 2023
d336c50
New screenshot for Incident Fetch Interval param
ShirleyDenkberg Sep 20, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added docs/doc_imgs/integrations/fetch-incidents.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
9 changes: 7 additions & 2 deletions docs/integrations/fetching-incidents.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,9 +12,11 @@ This topic provides:
- Troubleshooting tips

## fetch-incidents Command
The ***fetch-incidents*** command is the function that Cortex XSOAR calls every minute to import new incidents. It is triggered by the *Fetches incidents* parameter in the integration configuration. It is not necessary to configure the ***fetch-incidents*** command in the integration settings.
The ***fetch-incidents*** command is the function that Cortex XSOAR calls to import new incidents. It is triggered by the *Fetches incidents* parameter in the integration configuration. It is not necessary to configure the ***fetch-incidents*** command in the integration settings.

![screen shot 2019-01-07 at 15 35 01](/doc_imgs/integrations/50771147-6aedb800-1292-11e9-833f-b5dd13e3507b.png)
When you select the the *Fetch incidents* parameter in the integration configuration, you should also configure the *Incidents Fetch Interval* parameter. This controls how often the integration will perform a ***fetch_incidents*** command. The default is 1 minute.

![screen shot 2023-09-20](/doc_imgs/integrations/fetch-incidents.png)

Open the ***fetch-incidents*** command. Make sure the command is also referenced in the execution block.

Expand All @@ -28,6 +30,9 @@ if demisto.command() == 'fetch-incidents':

```




## Last Run
The *demisto.getLastRun()* function retrieves the last previous run time.
This helps avoid duplicate incidents by fetching only events that occurred since the last time the function was run.
Expand Down
Loading