An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.
How can they achieve this?
An administrator has noticed that an incident fetch has failed, causing several internal workflows to be backed up. The administrator would like to receive notifications the next time the incident fetch fails.
How can they achieve this?
An administrator can add a server configuration to notify when an incident fetch fails. This method involves configuring the system to send notifications to specified users explicitly when the incident fetch encounters issues, ensuring timely alerts without creating custom playbooks or new integrations.
Should be D https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOAR-Administrator-Guide/Fetch-Incidents-From-an-Integration-Instance
In the integration instance, ensure that you select the Fetch Incidents checkbox. Select Settings → About → Troubleshooting → Add Server Configuration. Add the following keys and values: Key: module.health.notification.users List of names in CSV format, for example Value: user1,user2,user3. Key: message.ignore.failedFetchIncidents Value: false
server config
D https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.6/Cortex-XSOAR-Administrator-Guide/Receive-Notification-on-an-Incident-Fetch-Error