Receive Notification on an Incident Fetch Error - Administrator Guide - EoL - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-07-16
Category
Administrator Guide
End of Life > EoL
Abstract

Receive notifications if an integration experiences an incident fetch error using Cortex XSOAR server configurations. You can also troubleshoot incident fetching.

The administrator and Cortex XSOAR users on the recipient’s list receive a notification when an integration experiences an incident fetch error. Administrators with multiple instances of mail sender can choose to receive one email notification instead of multiple email notifications. Cortex XSOAR users can select their notification method, such as email, or mobile, from their user preferences.

Note

The connectivity behavior that exists between third-party applications may trigger a fetch failure, which will send a notification to an administrator and users. The notification may no longer be relevant because the fetch might operate correctly just after the notification was sent.

Before you begin

In the integration instance, ensure that you select the Fetch Incidents checkbox.

  1. Select Settings → About → Troubleshooting → Add Server Configuration.

  2. Add the following keys and values:

    Key

    Value

    module.health.notification.users

    List of names in CSV format, for example user1,user2,user3.

    message.ignore.failedFetchIncidents

    false.

  3. (Optional) Administrators that have multiple instances of mail sender configured that want to receive only one email notification need to add the following key and value:

    Key

    Value

    server.notification.using.send-mail

    The mail-sender instance name.