Receive notifications on an incident fetch error - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Cloud Documentation
Product
Cortex XSOAR
Version
8
Creation date
2024-03-07
Last date published
2024-11-28
Category
Administrator Guide
Solution
Cloud
Abstract

Add a server configuration to receive notifications if an integration experiences an incident fetch error.

The administrator and Cortex XSOAR users on the recipient’s list receive a notification when an integration experiences an incident fetch error. Administrators with multiple instances of mail senders can choose to receive one email notification instead of multiple email notifications. Cortex XSOAR users can select their notification method, such as email, from their user preferences.

Note

The connectivity behavior that exists between third-party applications may trigger a fetch failure, which will send a notification to an administrator and users. The notification may no longer be relevant because the fetch might operate correctly just after the notification was sent.

  1. In the integration instance, select the Fetch Incidents checkbox.

  2. Select Settings & Info → Settings → System → Server Settings → Add Server Configuration.

  3. Add the following keys and values:

    Key

    Value

    module.health.notification.users

    List of names in CSV format, for example, user1,user2,user3.

    message.ignore.failedFetchIncidents

    false

  4. (Optional) Administrators that have multiple instances of a mail sender configured that want to receive only one email notification should select the Do not use by default option in the integration instances that should not be used to send emails.