Frequently asked questions about Cortex XSIAM Marketplace content.
Should Marketplace content always be updated?
Marketplace updates are a source for bug fixes and provide new commands for integrations and automation. It’s a best practice to update content packs to the newest available version. If you encounter any issue with content updates, you can revert to a previous version with one click.
When can Marketplace content be updated?
You can update content while the system is in use. If a playbook, for example, is running on an asset while you update that playbook, the original version of the playbook will continue to run without issues. If the playbook includes an integration command that has been updated, and the update occurs before the playbook reaches this task, the new version of the integration command will be used.
How can content updates be rolled back? Are dependencies automatically rolled back as well?
You can view all versions of a content pack in the Marketplace and revert to earlier versions there. When you revert a content pack, only the content pack is reverted, not the pack dependencies.