Apply propagation labels to control which content is synced from the main tenant to child tenants in a Cortex XSOAR multi-tenant deployment.
You can add propagation labels when creating a new content item or when editing an existing item.
The default propagation label for all content items is all.
Tip
We recommend that you first apply propagation labels to your child tenants and then add the corresponding labels to the content items that you want to sync to the tenants.
The following content items support propagation labels:
Playbooks
Scripts
Integrations
Indicator fields
Incident fields
Evidence fields
Indicator types
Incident types
Pre-process rules
Lists
Widgets
Dashboards
Incident layouts
Indicator layouts
Note
When installing a content pack from the Marketplace, the default propagation label is set to all
. If you want to change the propagation label, after installation, go to the INSTALLED CONTENT PACKS tab in the Marketplace page and click the propagation button for the content pack. If a content item is part of a content pack and it is not specifically labeled, it inherits the content pack’s propagation labels. If labels are specified, it propagates according to those labels.
For a non-content item such as an integration instance, if you want to propagate the instance, you need to apply propagation labels both to the integration and to the instance. If a tenant does not have the integration installed, the instance will not be propagated even if the propagation label exists both on the main tenant and child tenant .
If you want to create new propagation labels, or add existing ones, ensure that you have the required permissions.
Go to the content item that you want to add a propagation label to.
In the Propagation Labels field add the relevant labels by either selecting an existing label or typing a new label. After typing a new label and pressing
Enter
, the label is available immediately for use. If you instead keep the defaultall
label, the content syncs to all child tenants.