Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
Security Operations
Cortex XSOAR
Cortex XSOAR Administrator’s Guide
Incidents
Incident Management
Investigate an Incident Using the Canvas
Edit Dbot Incident and Indicator Suggestions
Document:
Cortex XSOAR Administrator’s Guide
Edit Dbot Incident and Indicator Suggestions
Download PDF
Last Updated:
Sat Mar 05 23:12:46 PST 2022
Current Version:
6.0 (EoL)
Version 6.6
Version 6.5
Version 6.2
Version 6.1 (EoL)
Version 6.0 (EoL)
Version 5.5 (EoL)
End-of-Life (EoL)
Previous
Next
Edit Dbot Incident and Indicator Suggestions
troubleshooting Follow these instructions to edit Dbot incident and indicator suggestions in the Canvas.
In the Investigation Canvas, Dbot provides suggestions in the Entity Library section and the
Quick View
window. You can change these suggestions by adding keys and values when adding a server configuration.
Select
Settings
About
Troubleshooting
Add Server Configuration
.
Add the following keys and values as required:
Key
Description
canvas.suggestions.IncidentIndicatorSuggestions.max
Maximum number of suggestions for malicious suggestions. Default: 5
Relevant for Library and Quick View.
canvas.suggestions.IncidentMutualIndicatorSuggestions.max
Maximum number of suggestions for common indicators between incidents. Default: 5
Relevant for Library and Quick View.
canvas.suggestions.IndicatorIndicatorSuggestions.max
Maximum number of suggestions for indicators. Default: 5
Relevant for Quick View.
ml.suggestions.canvas.leftpane.incidents.limit
Maximum number of incidents in the Quick View window. Default: 10
Relevant for Quick View.
Previous
Next
Recommended For You
Recommended Videos
Recommended videos not found.