Add a server configuration in Cortex XSOAR to apply CSS, style attributes to HTML fields, or change maximum field size.
From version 6.0.1, when adding an HTML field, by default, Cortex XSOAR does not apply its own style themes to the HTML field.
If you have existing HTML fields and upgrade from an earlier version, the HTML fields may not appear as expected. You can change the default behavior to allow HTML fields to utilize style themes from existing user styles.
You can also change the HTML maximum size, and append any missing HTML styles to default styles. By default, HTML fields populated by integrations are limited to 50KB of data. When working with Threat Intel Feeds, content greater than 50KB is truncated.
Note
Relevant for all HTML entries and fields, such as in widgets, dashboards, incidents, indicators, etc.
Select → → → .
To change the styles to utilize style themes from existing user styles, add the following key and value.
By default, this configuration is set to false, so you cannot use Cortex XSOAR theme styles.
Key
Value
UI.html.use.theme.csstrueTo change the maximum size to display the HTML field, add the following key and value:
Key
Value
indicator.feed.html.field.truncate.maxCharsDefault is 50KB. If you increase the limit substantially, it may slow performance.
To change the style attributes, add the following key and value:
If the HTML is missing some of the styles and it does not appear as expected, you should append the missing styles to the default styles.
Key
Value
incident.html.style.attributesSupports the following styles:
text-align,font-size,font-family,font-weight,color,line-height,border-style,border,page-break-inside,tablelayout,padding,background-size,display,padding-top,padding-right,padding-bottom,padding-left,text-size-adjust,break-inside,word-break,width,height,-ms-text-size-adjust,-webkit-text-size-adjustClick Save to save any configuration.