Receive Notification on an Incident Fetch Error - Administrator Guide - 6.8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.8
Creation date
2022-09-28
Last date published
2024-03-21
End_of_Life
EoL
Category
Administrator Guide
Abstract

Receive notifications if an integration experiences an incident fetch error. Cortex XSOAR server configuration. Incident fetch troubleshooting.

The administrator and Cortex XSOAR users on the recipient’s list receive a notification when an integration experiences an incident fetch error. Administrators with multiple instances of mail sender can choose to receive one email notification instead of multiple email notifications. Cortex XSOAR users can select their notification method, such as email, from their user preferences.

Note

The connectivity behavior that exists between third-party applications may trigger a fetch failure, which will send a notification to an administrator and users. The notification may no longer be relevant because the fetch might operate correctly just after the notification was sent.

Before you begin

In the integration instance, ensure that you select the Fetch Incidents checkbox.

  1. Select SettingsAboutTroubleshootingAdd Server Configuration.

  2. Add the following keys and values:

    Key

    Value

    module.health.notification.users

    List of names in CSV format, for example user1,user2,user3.

    message.ignore.failedFetchIncidents

    false.

  3. (Optional) Administrators that have multiple instances of a mail sender configured that want to receive only one email notification should select the Do not use by default option in the integration instances that should not be used to send emails.