Configure the indicator timeline - Administrator Guide - 8.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation
Product
Cortex XSOAR
Version
8.5
Creation date
2024-03-10
Last date published
2025-03-16
Category
Administrator Guide
Solution
On-prem
Abstract

Add a server configuration to manage the indicator timeline in Cortex XSOAR and improve indicator timeline performance.

The indicator timeline displays a list of dates and events that affect the timeline, such as change of verdict and traffic light protocol.

A large number of indicators can affect the performance of the indicator timeline. You can configure advanced server configurations to manage indicator timeline performance.

  1. Select Settings & Info → Settings → System → Server Settings → Server Configuration → Add Server Configuration.

  2. Add the following server configurations.

    Key

    Value

    Description

    indicator.timeline.enabled

    true or false

    Enables the indicator timeline in all flows. The default is true.

    indicator.timeline.auto. extract.enabled

    true or false

    Enables the indicator timeline in the indicator extraction flow. The default is true.