Configure the indicator timeline - Threat Intel Management Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Product
Cortex XSOAR
Version
8
Creation date
2023-11-02
Last date published
2024-02-22
Category
Threat Intel Management Guide
Abstract

Add a server configuration to manage the indicator timeline in Cortex XSOAR and improve indicator timeline performance.

The indicator timeline displays a list of dates and events for change of verdict, traffic light protocol, etc. A large number of indicators can affect the indicator timeline performance. You can configure advanced server configurations to manage the indicator timeline performance.

  1. Select Settings & InfoSettingsSystemServer SettingsServer ConfigurationAdd Server Configuration.

  2. Add the following server configurations.

    Key

    Value

    Description

    indicator.timeline.enabled

    true or false

    Enables the indicator timeline in all flows. The default is true.

    indicator.timeline.auto. extract.enabled

    true or false

    Enables the indicator timeline in the indicator extraction flow. The default is true.