Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

QRadar: add polling in YAML #29097

Merged
merged 8 commits into from
Aug 24, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion Packs/QRadar/Integrations/QRadar_v3/QRadar_v3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1037,6 +1037,7 @@ script:
- name: fields
description: 'Comma-separated list of fields to retrieve in the response. Fields that are not explicitly named are excluded. E.g., "name,timeout_type". Specify subfields in brackets and multiple fields in the same object separated by commas. For a full list of available fields, see: https://ibmsecuritydocs.github.io/qradar_api_14.0/14.0--reference_data-sets-name-POST.html.'
isArray: true
polling: true
- name: qradar-reference-set-value-delete
description: Removes a value from a reference set.
arguments:
Expand Down Expand Up @@ -1152,6 +1153,7 @@ script:
- name: fields
description: 'Comma-separated list of fields to retrieve in the response. Fields that are not explicitly named are excluded. E.g., "name,timeout_type". Specify subfields in brackets and multiple fields in the same object separated by commas. For a full list of available fields, see: https://ibmsecuritydocs.github.io/qradar_api_14.0/14.0--reference_data-maps-bulk_load-namespace-name-domain_id-POST.html.'
isArray: true
polling: true
- name: qradar-geolocations-for-ip
description: Retrieves the MaxMind GeoIP data for the specified IP address.
outputs:
Expand Down Expand Up @@ -2529,7 +2531,7 @@ script:
script: '-'
type: python
subtype: python3
dockerimage: demisto/python3:3.10.12.68300
dockerimage: demisto/python3:3.10.12.68714
isremotesyncin: true
longRunning: true
isFetchSamples: true
Expand Down
8 changes: 8 additions & 0 deletions Packs/QRadar/ReleaseNotes/2_4_32.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@

#### Integrations

##### IBM QRadar v3
- Updated the Docker image to: *demisto/python3:3.10.12.68714*.
- Fixed an issue where the following commands were not marked as polling commands:
- ***qradar-reference-set-value-upsert***
- ***qradar-indicators-upload***
2 changes: 1 addition & 1 deletion Packs/QRadar/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "IBM QRadar",
"description": "Fetch offenses as incidents and search QRadar",
"support": "xsoar",
"currentVersion": "2.4.31",
"currentVersion": "2.4.32",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down