Change the Docker Image for Scripts and Integrations - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide
Product
Cortex XSIAM
Creation date
2024-07-16
Last date published
2024-10-07
Category
Administrator Guide
Abstract

Use an alternative Docker image for Python scripts in Cortex XSIAM. Set the Docker image to use to run an integration.

By default, Cortex XSIAM runs Python scripts in a Docker image. See Docker Images for more information.Docker Images

The default Docker image that Cortex XSIAM uses is demisto/python3, but you can use other Docker images that you have on your system. Cortex XSIAM

  • 2.7

  • 3.0 and later

Change the Docker Image for a Custom Script

  1. Edit the script.

  2. Under ADVANCED, click X to clear the current selection and then select a Docker image name from the dropdown menu.

  3. Save your changes.

Change the Docker Image for a Custom Integration

  1. Go to Settings → Configurations → Automations & Feed Integrations, find your custom integration, and click the pencil icon to edit the integration’s source.

  2. In the INTEGRATION SETTINGS, expand the SCRIPT section.

  3. Click X to clear the current selection and then select a Docker image name from the dropdown menu.

  4. Save your changes.