Receive Notification on an Incident Fetch Error - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-04-11
Category
Administrator Guide
Solution
Cloud
Abstract

Add a server configuration to receive notifications if an integration experiences an incident fetch error.

The administrator and Cortex XSOAR users on the recipient’s list receive a notification when an integration experiences an incident fetch error. Administrators with multiple instances of mail sender can choose to receive one email notification instead of multiple email notifications. Cortex XSOAR users can select their notification method, such as email, from their user preferences.

Note

The connectivity behavior that exists between third party applications may trigger a fetch failure, which will send a notification to an administrator and users. The notification may no longer be relevant because the fetch might operate correctly just after the notification was sent.

Before you begin

In the integration instance, ensure that you select the Fetch Incidents check box.

  1. Select Settings & InfoSettingsSystemServer Settings+ Add Server Configuration.

  2. Add the following keys and values:

    Key

    Value

    module.health.notification.users

    List of names in CSV format, for example user1,user2,user3.

    message.ignore.failedFetchIncident

    false

  3. (Optional) Administrators that have multiple instances of a mail sender configured that want to receive only one email notification should select the Do not use by default option in the integration instances that should not be used to send emails.