-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
XDR IR fix in close_xdr_incident error 500 #37246
base: master
Are you sure you want to change the base?
Conversation
Coverage Report
|
@maimorag @Shellyber Doc review completed. |
changes from doc review Co-authored-by: ShirleyDenkberg <[email protected]>
@@ -1041,7 +1041,10 @@ def update_remote_system_command(client, args): | |||
|
|||
if not close_xdr_incident and (update_args.get('status') in XSOAR_RESOLVED_STATUS_TO_XDR.values()): | |||
status = update_args.pop('status') | |||
demisto.debug(f"Popped {status=} from update_args, incident status won't be updated in XDR.") | |||
resolve_comment = update_args.pop('resolve_comment', None) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are you sure that the only field causing this issue is the resolve_comment
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What about this?
…cident not selected
Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR_description.md
Outdated
Show resolved
Hide resolved
@noydavidi Doc reviewed again. |
docs review changes Co-authored-by: ShirleyDenkberg <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Noce work
@@ -1041,7 +1041,10 @@ def update_remote_system_command(client, args): | |||
|
|||
if not close_xdr_incident and (update_args.get('status') in XSOAR_RESOLVED_STATUS_TO_XDR.values()): | |||
status = update_args.pop('status') | |||
demisto.debug(f"Popped {status=} from update_args, incident status won't be updated in XDR.") | |||
resolve_comment = update_args.pop('resolve_comment', None) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What about this?
if not close_xdr_incident and (update_args.get('status') in XSOAR_RESOLVED_STATUS_TO_XDR.values()): | ||
status = update_args.pop('status') | ||
demisto.debug(f"Popped {status=} from update_args, incident status won't be updated in XDR.") | ||
popped_status = update_args.pop('status') |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's change the terminology back to status, and add maybe a comment for the if statement so it will be clear what it does.
Status
Related Issues
fixes: link to the issue
Description
Fixed an issue with outgoing mirroring when closing an incident in Cortex XSOAR with close_xdr_incident set to False resulted in a 500 error.
Fixed an issue with outgoing mirroring when closing an incident in Cortex XSOAR with close_xdr_incident set to False and close_alerts_in_xdr set to True resulted in an error.
Must have