Add a Script to the Incident Layout - Administrator Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-03-21
End_of_Life
EoL
Category
Administrator Guide
Abstract

Add automation script-based content to the Incident info tab in Cortex XSOAR using the incident General Purpose Dynamic section in the layout builder.

You can add automation script-based content to the Incident Info tab, by adding the General Purpose Dynamic Section in the incident layout builder.

The General Purpose Dynamic Section enables you to configure a section in the Incident Info tab from an automation script. The automation can return a simple text, markdown, or an HTML, the results of which appear in General Purpose Dynamic Section.

You can add any required information from an automation. For example, you can assign a script that calculates the total number of entries that exist for an incident, and it dynamically updates when new entries are added to the incident. You can also Add a Custom Widget to the Incident Page and Add Note Information Using an Automation Script.

Before you begin, you need to create an automation script.

  1. Select the layout you want to add to the General Purpose Dynamic Section by completing steps 1 to 3 in Customize Incident Layouts.

  2. Drag and drop the General Purpose Dynamic Section into the layout area you want to appear.

  3. Select the General Purpose Dynamic Section, click indicator-option-pointer.png and then click Edit section settings.

  4. In the Name and Description fields, add a meaningful name and a description for the dynamic section that explains what the script displays.

  5. In the Automation script field, from the dropdown list, select the script that returns data for the dynamic section.

    Note

    Only automations to which you have added the dynamic-section tag appear in the dropdown list.

    script_settings.png
  6. Click OK.