From 9b0b811a2d062335d8bf3288d2ddf82069f0e991 Mon Sep 17 00:00:00 2001 From: adi88d Date: Sun, 5 Nov 2023 18:23:39 +0200 Subject: [PATCH 1/5] edl enhancements --- Packs/EDL/Integrations/EDL/EDL.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Packs/EDL/Integrations/EDL/EDL.yml b/Packs/EDL/Integrations/EDL/EDL.yml index 46098a189bd7..8ec96d62e2b6 100644 --- a/Packs/EDL/Integrations/EDL/EDL.yml +++ b/Packs/EDL/Integrations/EDL/EDL.yml @@ -17,8 +17,7 @@ configuration: display: Indicator Query name: indicators_query type: 0 - section: Collect - advanced: true + advanced: false required: false - additionalinfo: The format of the exported list. defaultvalue: PAN-OS (text) @@ -62,6 +61,7 @@ configuration: type: 0 section: Connect required: false + hidden: true - additionalinfo: (For Cortex XSOAR 6.x) For use with HTTPS - the certificate that the service should use. (For Cortex XSOAR 8 and Cortex XSIAM) Custom certificates are not supported. display: Certificate (Required for HTTPS) name: certificate @@ -251,8 +251,8 @@ configuration: section: Connect advanced: true required: false -- additionalinfo: 'This parameter will be deprecated from September 2023. Make sure to adjust your default queries accordingly..' - display: 'Advanced: Use Legacy Queries (Deprecated)' +- additionalinfo: 'When enabled, the integration queries the server using full queries (overwrites the "Exported Fields" parameter). Advanced configuration to be used only if instructed by Cortex XSOAR Support, or you have encountered log errors in the form of: msgpack: invalid code.' + display: 'Advanced: Use Legacy Queries' name: use_legacy_query type: 8 section: Collect From 3b9e409cc8896065436d5400281ffcd2249b4094 Mon Sep 17 00:00:00 2001 From: adi88d Date: Sun, 5 Nov 2023 18:31:25 +0200 Subject: [PATCH 2/5] update RN --- Packs/EDL/Integrations/EDL/EDL.yml | 6 ------ Packs/EDL/ReleaseNotes/3_2_13.md | 9 +++++++++ Packs/EDL/pack_metadata.json | 2 +- 3 files changed, 10 insertions(+), 7 deletions(-) create mode 100644 Packs/EDL/ReleaseNotes/3_2_13.md diff --git a/Packs/EDL/Integrations/EDL/EDL.yml b/Packs/EDL/Integrations/EDL/EDL.yml index 8ec96d62e2b6..d1c86b627c3b 100644 --- a/Packs/EDL/Integrations/EDL/EDL.yml +++ b/Packs/EDL/Integrations/EDL/EDL.yml @@ -76,12 +76,6 @@ configuration: section: Connect advanced: true required: false -- additionalinfo: Uses basic authentication for accessing the list. If empty, no authentication is enforced. (For Cortex XSOAR 8 and Cortex XSIAM) Optional for engines, otherwise mandatory. - display: Username - name: credentials - type: 9 - section: Connect - required: false - additionalinfo: If selected, the comment "# Empty list" is added to an empty list. defaultvalue: 'true' display: Add comment to empty list diff --git a/Packs/EDL/ReleaseNotes/3_2_13.md b/Packs/EDL/ReleaseNotes/3_2_13.md new file mode 100644 index 000000000000..2ddc2741c235 --- /dev/null +++ b/Packs/EDL/ReleaseNotes/3_2_13.md @@ -0,0 +1,9 @@ + +#### Integrations + +##### Generic Export Indicators Service + +- Undeprecated the *Legacy Query* parameter. +- Hide the *Listen Port* parameter. +- Move out from `Advanced settings` the *query* parameter. +- Removed the *credentials* parameter. \ No newline at end of file diff --git a/Packs/EDL/pack_metadata.json b/Packs/EDL/pack_metadata.json index 5efda918ae81..057c7640e354 100644 --- a/Packs/EDL/pack_metadata.json +++ b/Packs/EDL/pack_metadata.json @@ -2,7 +2,7 @@ "name": "Generic Export Indicators Service", "description": "Use this pack to generate a list based on your Threat Intel Library, and export it to ANY other product in your network, such as your firewall, agent or SIEM. This pack is built for ongoing distribution of indicators from XSOAR to other products in the network, by creating an endpoint with a list of indicators that can be pulled by external vendors.", "support": "xsoar", - "currentVersion": "3.2.12", + "currentVersion": "3.2.13", "author": "Cortex XSOAR", "url": "https://www.paloaltonetworks.com/cortex", "email": "", From 77002b1772cb13d5079fbd6939dbb719c09cda08 Mon Sep 17 00:00:00 2001 From: adi88d Date: Sun, 5 Nov 2023 18:49:53 +0200 Subject: [PATCH 3/5] update hidden value update RN --- Packs/EDL/Integrations/EDL/EDL.yml | 13 +++++++++++-- Packs/EDL/ReleaseNotes/3_2_13.md | 6 +++--- 2 files changed, 14 insertions(+), 5 deletions(-) diff --git a/Packs/EDL/Integrations/EDL/EDL.yml b/Packs/EDL/Integrations/EDL/EDL.yml index d1c86b627c3b..11759f53ddaa 100644 --- a/Packs/EDL/Integrations/EDL/EDL.yml +++ b/Packs/EDL/Integrations/EDL/EDL.yml @@ -61,7 +61,8 @@ configuration: type: 0 section: Connect required: false - hidden: true + hidden: + - marketplacev2 - additionalinfo: (For Cortex XSOAR 6.x) For use with HTTPS - the certificate that the service should use. (For Cortex XSOAR 8 and Cortex XSIAM) Custom certificates are not supported. display: Certificate (Required for HTTPS) name: certificate @@ -76,6 +77,14 @@ configuration: section: Connect advanced: true required: false +- additionalinfo: Uses basic authentication for accessing the list. If empty, no authentication is enforced. (For Cortex XSOAR 8 and Cortex XSIAM) Optional for engines, otherwise mandatory. + display: Username + name: credentials + type: 9 + section: Connect + required: false + hidden: + - marketplacev2 - additionalinfo: If selected, the comment "# Empty list" is added to an empty list. defaultvalue: 'true' display: Add comment to empty list @@ -422,7 +431,7 @@ script: - 'False' - 'True' description: Updates values stored in the List (only available On-Demand). - dockerimage: demisto/flask-nginx:1.0.0.75066 + dockerimage: demisto/flask-nginx:1.0.0.79973 longRunning: true longRunningPort: true script: '-' diff --git a/Packs/EDL/ReleaseNotes/3_2_13.md b/Packs/EDL/ReleaseNotes/3_2_13.md index 2ddc2741c235..0588341cd622 100644 --- a/Packs/EDL/ReleaseNotes/3_2_13.md +++ b/Packs/EDL/ReleaseNotes/3_2_13.md @@ -3,7 +3,7 @@ ##### Generic Export Indicators Service -- Undeprecated the *Legacy Query* parameter. -- Hide the *Listen Port* parameter. +- Undeprecated the *Legacy Query* parameter. +- Removed *Listen Port* and *credentials* parameters from cortex XSIAM. - Move out from `Advanced settings` the *query* parameter. -- Removed the *credentials* parameter. \ No newline at end of file +- Updated the Docker image to: *demisto/flask-nginx:1.0.0.79973*. \ No newline at end of file From 1cb60f5175e0760b5c8eab1146c14c2bb5468547 Mon Sep 17 00:00:00 2001 From: adi88d Date: Mon, 6 Nov 2023 13:09:03 +0200 Subject: [PATCH 4/5] add xsoar_saas to hidden --- Packs/EDL/Integrations/EDL/EDL.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Packs/EDL/Integrations/EDL/EDL.yml b/Packs/EDL/Integrations/EDL/EDL.yml index 11759f53ddaa..e7e7c07fc6ca 100644 --- a/Packs/EDL/Integrations/EDL/EDL.yml +++ b/Packs/EDL/Integrations/EDL/EDL.yml @@ -17,6 +17,7 @@ configuration: display: Indicator Query name: indicators_query type: 0 + section: Collect advanced: false required: false - additionalinfo: The format of the exported list. @@ -63,6 +64,7 @@ configuration: required: false hidden: - marketplacev2 + - xsoar_saas - additionalinfo: (For Cortex XSOAR 6.x) For use with HTTPS - the certificate that the service should use. (For Cortex XSOAR 8 and Cortex XSIAM) Custom certificates are not supported. display: Certificate (Required for HTTPS) name: certificate @@ -85,6 +87,7 @@ configuration: required: false hidden: - marketplacev2 + - xsoar_saas - additionalinfo: If selected, the comment "# Empty list" is added to an empty list. defaultvalue: 'true' display: Add comment to empty list From 34790e3093a618bc621b657813b5bcd247814abf Mon Sep 17 00:00:00 2001 From: Adi Daud <46249224+adi88d@users.noreply.github.com> Date: Mon, 6 Nov 2023 14:25:12 +0200 Subject: [PATCH 5/5] Update Packs/EDL/ReleaseNotes/3_2_13.md Co-authored-by: ShirleyDenkberg <62508050+ShirleyDenkberg@users.noreply.github.com> --- Packs/EDL/ReleaseNotes/3_2_13.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Packs/EDL/ReleaseNotes/3_2_13.md b/Packs/EDL/ReleaseNotes/3_2_13.md index 0588341cd622..1cd8b6479a3b 100644 --- a/Packs/EDL/ReleaseNotes/3_2_13.md +++ b/Packs/EDL/ReleaseNotes/3_2_13.md @@ -4,6 +4,6 @@ ##### Generic Export Indicators Service - Undeprecated the *Legacy Query* parameter. -- Removed *Listen Port* and *credentials* parameters from cortex XSIAM. +- Removed *Listen Port* and *credentials* parameters from Cortex XSIAM. - Move out from `Advanced settings` the *query* parameter. - Updated the Docker image to: *demisto/flask-nginx:1.0.0.79973*. \ No newline at end of file