Configure the Indicator Timeline - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-02-14
Last date published
2024-06-25
Category
Administrator Guide
Solution
Cloud
Abstract

Add a server configuration to manage the indicator timeline in Cortex XSOAR and improve indicator timeline performance.

The indicator timeline displays a list of dates and events showing changes in an indicator over time, such as change of verdict and traffic light protocol. A large number of indicators can affect the indicator timeline performance. You can configure advanced server configurations to manage the indicator timeline performance.

  1. Select Settings & InfoSettingsSystemServer SettingsServer ConfigurationAdd Server Configuration.

  2. Add the following server configurations.

    Key

    Value

    Description

    indicator.timeline.enabled

    true or false

    Enables the indicator timeline in all flows. The default is true.

    indicator.timeline.auto. extract.enabled

    true or false

    Enables the indicator timeline in the indicator extraction flow. The default is true.