From a4e37dcfe556191b9c8747b0d7cfb6aef35d2d17 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:00:06 +0300 Subject: [PATCH 01/13] fix modify edl playbook --- Packs/EDL/Playbooks/Modify_EDL.yml | 107 ++++++++++++++++++----------- 1 file changed, 68 insertions(+), 39 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 8743b5ca57ba..d96796996744 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -1,5 +1,15 @@ id: Modify EDL -version: -1 +version: 4 +contentitemexportablefields: + contentitemfields: + packID: EDL + packName: Generic Export Indicators Service + itemVersion: 3.2.21 + fromServerVersion: 6.6.0 + toServerVersion: "" + definitionid: "" + prevname: "" +vcShouldKeepItemLegacyProdMachine: false name: Modify EDL description: |- Adds indicators to or removes indicators from an external dynamic list (EDL) by adding or removing an indicator tag. The EDL itself is generated by using the Cortex XSOAR Generic Export Indicators Service integration and querying on a tag in the Indicator Query parameter. @@ -21,11 +31,11 @@ tasks: name: "" iscommand: false brand: "" - description: '' nexttasks: '#none#': - "30" separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -63,6 +73,7 @@ tasks: complex: root: InputIndicatorsArray separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -79,10 +90,10 @@ tasks: isautoswitchedtoquietmode: false "4": id: "4" - taskid: 64f17c95-4126-441f-8e9f-c15bdb612756 + taskid: 2a97257f-f9bb-40f2-8d6f-b476961da61f type: regular task: - id: 64f17c95-4126-441f-8e9f-c15bdb612756 + id: 2a97257f-f9bb-40f2-8d6f-b476961da61f version: -1 name: Save input list of indicators as array (Split transformer) description: Set a value in context under the key you entered. @@ -99,7 +110,7 @@ tasks: value: complex: root: incident - accessor: edlindicatorslist + accessor: genericexportindicatorsserviceindicatorslist transformers: - operator: StripChars args: @@ -123,6 +134,7 @@ tasks: simple: |2+ separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -148,8 +160,8 @@ tasks: type: title iscommand: false brand: "" - description: '' separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -198,6 +210,7 @@ tasks: value: simple: ${FoundIndicators} separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -223,12 +236,12 @@ tasks: type: title iscommand: false brand: "" - description: '' nexttasks: '#none#': - "24" - "25" separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -277,6 +290,7 @@ tasks: value: simple: ${FoundIndicators} separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -299,7 +313,8 @@ tasks: id: 0c815fb4-5ee4-4f72-8c83-6e559d73928a version: -1 name: Are there new indicators to create? - description: Check if there are new indicators to create, which do not already exist in the Cortex XSOAR database. + description: Check if there are new indicators to create, which do not already + exist in the Cortex XSOAR database. type: condition iscommand: false brand: "" @@ -329,6 +344,7 @@ tasks: iscontext: true right: value: {} + continueonerrortype: "" view: |- { "position": { @@ -351,7 +367,8 @@ tasks: id: 63c89c44-1914-427f-8590-328c861ba7ae version: -1 name: Are there pre-existing indicators to update? - description: Check if there are indicators that already exist in the Cortex XSOAR database. IF so, the tag needs to be added to add them to the EDL. + description: Check if there are indicators that already exist in the Cortex + XSOAR database. IF so, the tag needs to be added to add them to the EDL. type: condition iscommand: false brand: "" @@ -381,6 +398,7 @@ tasks: iscontext: true right: value: {} + continueonerrortype: "" view: |- { "position": { @@ -397,10 +415,10 @@ tasks: isautoswitchedtoquietmode: false "26": id: "26" - taskid: b61606d4-3222-422c-8d5e-c05416c729bb + taskid: e58007a8-290f-43b3-85f2-280a16526440 type: regular task: - id: b61606d4-3222-422c-8d5e-c05416c729bb + id: e58007a8-290f-43b3-85f2-280a16526440 version: -1 name: Close incident description: commands.local.cmd.close.inv @@ -412,6 +430,7 @@ tasks: '#none#': - "9" separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -428,13 +447,14 @@ tasks: isautoswitchedtoquietmode: false "27": id: "27" - taskid: 2b108cd4-dd69-4f2f-8e94-fa56238d6791 + taskid: 8ff5b7b0-f350-47dc-85ae-a8674691f6d0 type: condition task: - id: 2b108cd4-dd69-4f2f-8e94-fa56238d6791 + id: 8ff5b7b0-f350-47dc-85ae-a8674691f6d0 version: -1 name: Adding or removing indicators? - description: Check whether to add or remove indicators from the EDL, according to the value of the `EDL Action`input field. + description: Check whether to add or remove indicators from the EDL, according + to the value of the `EDL Action`input field. type: condition iscommand: false brand: "" @@ -450,7 +470,7 @@ tasks: - - operator: isEqualString left: value: - simple: incident.edlaction + simple: incident.genericexportindicatorsserviceaction iscontext: true right: value: @@ -460,11 +480,12 @@ tasks: - - operator: isEqualString left: value: - simple: incident.edlaction + simple: incident.genericexportindicatorsserviceaction iscontext: true right: value: simple: Remove + continueonerrortype: "" view: |- { "position": { @@ -490,11 +511,11 @@ tasks: type: title iscommand: false brand: "" - description: '' nexttasks: '#none#': - "29" separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -511,10 +532,10 @@ tasks: isautoswitchedtoquietmode: false "29": id: "29" - taskid: de93e06f-1ebe-48e2-84a2-2637ede4f7c5 + taskid: ffc0eb39-23e0-48ba-87be-37c73242c37e type: regular task: - id: de93e06f-1ebe-48e2-84a2-2637ede4f7c5 + id: ffc0eb39-23e0-48ba-87be-37c73242c37e version: -1 name: Remove EDL tag from indicators description: commands.local.cmd.remove.values.to.indicator.multi.select.field @@ -529,12 +550,11 @@ tasks: field: simple: tags fieldValue: - complex: - root: incident - accessor: edltag + simple: ${incident.genericexportindicatorsservicetag} indicatorsValues: simple: ${InputIndicatorsArray} separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -551,13 +571,14 @@ tasks: isautoswitchedtoquietmode: false "30": id: "30" - taskid: cb238dc6-b905-4e82-844b-42c29320cf24 + taskid: b4dc98ea-e45d-412a-899a-b4f454ff33bc type: condition task: - id: cb238dc6-b905-4e82-844b-42c29320cf24 + id: b4dc98ea-e45d-412a-899a-b4f454ff33bc version: -1 name: Playbook inputs provided instead of incident fields? - description: Check if playbook is being run as a sub-playbook. (Check if values were passed as playbook inputs instead of incident fields.) + description: Check if playbook is being run as a sub-playbook. (Check if values + were passed as playbook inputs instead of incident fields.) type: condition iscommand: false brand: "" @@ -590,18 +611,19 @@ tasks: - - operator: isEmpty left: value: - simple: incident.edlaction + simple: incident.genericexportindicatorsserviceaction iscontext: true - - operator: isEmpty left: value: - simple: incident.edltag + simple: incident.genericexportindicatorsservicetag iscontext: true - - operator: isEmpty left: value: - simple: incident.edlindicatorslist + simple: incident.genericexportindicatorsserviceindicatorslist iscontext: true + continueonerrortype: "" view: |- { "position": { @@ -618,10 +640,10 @@ tasks: isautoswitchedtoquietmode: false "31": id: "31" - taskid: 4dccfd34-d082-419b-86df-5ffd31660d0d + taskid: d37195ba-e2cb-48bb-8a05-0e8a6f7506c0 type: regular task: - id: 4dccfd34-d082-419b-86df-5ffd31660d0d + id: d37195ba-e2cb-48bb-8a05-0e8a6f7506c0 version: -1 name: Set inputs to indicator fields description: commands.local.cmd.set.incident @@ -648,7 +670,14 @@ tasks: simple: ${inputs.EDL Indicator Type} edltag: simple: ${inputs.EDL Tag} + genericexportindicatorsserviceaction: + simple: ${inputs.EDL Action} + genericexportindicatorsserviceindicatorslist: + simple: ${inputs.EDL Indicators List} + genericexportindicatorsservicetag: + simple: ${inputs.EDL Tag} separatecontext: false + continueonerrortype: "" view: |- { "position": { @@ -663,6 +692,7 @@ tasks: quietmode: 0 isoversize: false isautoswitchedtoquietmode: false +system: true view: |- { "linkLabelsPosition": {}, @@ -680,23 +710,22 @@ inputs: value: {} required: true description: 'Action to perform on EDL. Possible values: "Add", "Remove".' - playbookInputQuery: + playbookInputQuery: null - key: EDL Tag value: {} required: true - description: Tag that adds indicators to EDL. Must match tag value used in EDL query in the instance configuration. - playbookInputQuery: + description: Tag that adds indicators to EDL. Must match tag value used in EDL query + in the instance configuration. + playbookInputQuery: null - key: EDL Indicator Type value: {} required: false description: Required only if adding to EDL. Type of indicators to add to EDL. - playbookInputQuery: + playbookInputQuery: null - key: EDL Indicators List value: {} required: true - description: List of IOCs to add to or remove from EDL (according to value of EDL Action). May be newline or comma-delimited. - playbookInputQuery: + description: List of IOCs to add to or remove from EDL (according to value of EDL + Action). May be newline or comma-delimited. + playbookInputQuery: null outputs: [] -tests: -- No tests (auto formatted) -fromversion: 6.6.0 From a460f9aa2a610039df43e2681c1104001152b7e9 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:08:40 +0300 Subject: [PATCH 02/13] added rn --- Packs/EDL/ReleaseNotes/3_3_3.md | 6 ++++++ Packs/EDL/pack_metadata.json | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) create mode 100644 Packs/EDL/ReleaseNotes/3_3_3.md diff --git a/Packs/EDL/ReleaseNotes/3_3_3.md b/Packs/EDL/ReleaseNotes/3_3_3.md new file mode 100644 index 000000000000..c9e0fc425e90 --- /dev/null +++ b/Packs/EDL/ReleaseNotes/3_3_3.md @@ -0,0 +1,6 @@ + +#### Playbooks + +##### Modify EDL + +- Fixed an issue where the playbook failed due to missing inputs. diff --git a/Packs/EDL/pack_metadata.json b/Packs/EDL/pack_metadata.json index 5d049b1f4fcf..0f1f931e59b9 100644 --- a/Packs/EDL/pack_metadata.json +++ b/Packs/EDL/pack_metadata.json @@ -2,7 +2,7 @@ "name": "Generic Export Indicators Service", "description": "Use this pack to generate a list based on your Threat Intel Library, and export it to ANY other product in your network, such as your firewall, agent or SIEM. This pack is built for ongoing distribution of indicators from XSOAR to other products in the network, by creating an endpoint with a list of indicators that can be pulled by external vendors.", "support": "xsoar", - "currentVersion": "3.3.2", + "currentVersion": "3.3.3", "author": "Cortex XSOAR", "url": "https://www.paloaltonetworks.com/cortex", "email": "", From 008cd24269fc3cd4bf853165024ce2ab8c9dc664 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:11:16 +0300 Subject: [PATCH 03/13] fixes --- Packs/EDL/Playbooks/Modify_EDL.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index d96796996744..88d918dba9f3 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -1,5 +1,5 @@ id: Modify EDL -version: 4 +version: -1 contentitemexportablefields: contentitemfields: packID: EDL @@ -729,3 +729,6 @@ inputs: Action). May be newline or comma-delimited. playbookInputQuery: null outputs: [] +tests: +- No tests (auto formatted) +fromversion: 6.6.0 \ No newline at end of file From 6571427b92825beb04948ea5d01851186e23a950 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:18:43 +0300 Subject: [PATCH 04/13] add type to set incident --- Packs/EDL/Playbooks/Modify_EDL.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 88d918dba9f3..10058826104c 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -640,10 +640,10 @@ tasks: isautoswitchedtoquietmode: false "31": id: "31" - taskid: d37195ba-e2cb-48bb-8a05-0e8a6f7506c0 + taskid: 3680f381-35df-4f13-850f-5f178d4f5499 type: regular task: - id: d37195ba-e2cb-48bb-8a05-0e8a6f7506c0 + id: 3680f381-35df-4f13-850f-5f178d4f5499 version: -1 name: Set inputs to indicator fields description: commands.local.cmd.set.incident @@ -674,6 +674,8 @@ tasks: simple: ${inputs.EDL Action} genericexportindicatorsserviceindicatorslist: simple: ${inputs.EDL Indicators List} + genericexportindicatorsserviceindicatortype: + simple: ${inputs.EDL Indicator Type} genericexportindicatorsservicetag: simple: ${inputs.EDL Tag} separatecontext: false From 74c7002b3909d34dbf99e80be38d3358c1cdb994 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:21:35 +0300 Subject: [PATCH 05/13] fixes --- Packs/EDL/Playbooks/Modify_EDL.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 10058826104c..28753b919588 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -194,9 +194,9 @@ tasks: - "26" scriptarguments: tags: - simple: ${incident.edltag} + simple: ${incident.genericexportindicatorsservicetag} type: - simple: ${incident.edlindicatortype} + simple: ${incident.genericexportindicatorsserviceindicatortype} value: complex: root: InputIndicatorsArray @@ -276,7 +276,7 @@ tasks: field: simple: tags fieldValue: - simple: ${incident.edltag} + simple: ${incident.genericexportindicatorsservicetag} indicatorsValues: complex: root: InputIndicatorsArray From 03f8dad760b3b61dae3781a07acbe06ebd230a63 Mon Sep 17 00:00:00 2001 From: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Date: Tue, 9 Jul 2024 15:42:50 +0300 Subject: [PATCH 06/13] Update Packs/EDL/Playbooks/Modify_EDL.yml --- Packs/EDL/Playbooks/Modify_EDL.yml | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 28753b919588..9ed475b42e17 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -1,15 +1,5 @@ id: Modify EDL version: -1 -contentitemexportablefields: - contentitemfields: - packID: EDL - packName: Generic Export Indicators Service - itemVersion: 3.2.21 - fromServerVersion: 6.6.0 - toServerVersion: "" - definitionid: "" - prevname: "" -vcShouldKeepItemLegacyProdMachine: false name: Modify EDL description: |- Adds indicators to or removes indicators from an external dynamic list (EDL) by adding or removing an indicator tag. The EDL itself is generated by using the Cortex XSOAR Generic Export Indicators Service integration and querying on a tag in the Indicator Query parameter. From 53154b656ca78223458b04e2156855effbe37aae Mon Sep 17 00:00:00 2001 From: Yuval Hayun <70104171+YuvHayun@users.noreply.github.com> Date: Tue, 9 Jul 2024 15:43:24 +0300 Subject: [PATCH 07/13] Update Packs/EDL/Playbooks/Modify_EDL.yml --- Packs/EDL/Playbooks/Modify_EDL.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 9ed475b42e17..a7737684c3ac 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -21,6 +21,7 @@ tasks: name: "" iscommand: false brand: "" + description: '' nexttasks: '#none#': - "30" From 1af95fd4f7562da74f428978a75bbdeb3df3eb1e Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 15:58:29 +0300 Subject: [PATCH 08/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index a7737684c3ac..669acd662533 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -21,7 +21,7 @@ tasks: name: "" iscommand: false brand: "" - description: '' + description: '' nexttasks: '#none#': - "30" From c20fee00931896c9a650e9f0fc205025d630324d Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 17:42:53 +0300 Subject: [PATCH 09/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 669acd662533..7b0590d713eb 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -21,12 +21,11 @@ tasks: name: "" iscommand: false brand: "" - description: '' + description: '' nexttasks: '#none#': - "30" separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -64,7 +63,6 @@ tasks: complex: root: InputIndicatorsArray separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -125,7 +123,6 @@ tasks: simple: |2+ separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -152,7 +149,6 @@ tasks: iscommand: false brand: "" separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -201,7 +197,6 @@ tasks: value: simple: ${FoundIndicators} separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -232,7 +227,6 @@ tasks: - "24" - "25" separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -281,7 +275,6 @@ tasks: value: simple: ${FoundIndicators} separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -335,7 +328,6 @@ tasks: iscontext: true right: value: {} - continueonerrortype: "" view: |- { "position": { @@ -389,7 +381,6 @@ tasks: iscontext: true right: value: {} - continueonerrortype: "" view: |- { "position": { @@ -421,7 +412,6 @@ tasks: '#none#': - "9" separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -476,7 +466,6 @@ tasks: right: value: simple: Remove - continueonerrortype: "" view: |- { "position": { @@ -506,7 +495,6 @@ tasks: '#none#': - "29" separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -545,7 +533,6 @@ tasks: indicatorsValues: simple: ${InputIndicatorsArray} separatecontext: false - continueonerrortype: "" view: |- { "position": { @@ -614,7 +601,6 @@ tasks: value: simple: incident.genericexportindicatorsserviceindicatorslist iscontext: true - continueonerrortype: "" view: |- { "position": { @@ -670,7 +656,6 @@ tasks: genericexportindicatorsservicetag: simple: ${inputs.EDL Tag} separatecontext: false - continueonerrortype: "" view: |- { "position": { From 249008e9642fc05fad1d18f59100209dce8ecfdc Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 17:46:04 +0300 Subject: [PATCH 10/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 7b0590d713eb..b6650d0bc223 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -222,6 +222,7 @@ tasks: type: title iscommand: false brand: "" + description: '' nexttasks: '#none#': - "24" From eeb6b9dd7328291535b1937c689e93c34807d03d Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 17:46:51 +0300 Subject: [PATCH 11/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index b6650d0bc223..f1f815947514 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -148,6 +148,7 @@ tasks: type: title iscommand: false brand: "" + description: '' separatecontext: false view: |- { From db3c9f03248758796380968c6ae32330c510ff5b Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 17:48:21 +0300 Subject: [PATCH 12/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index f1f815947514..579ce3831313 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -493,6 +493,7 @@ tasks: type: title iscommand: false brand: "" + description: '' nexttasks: '#none#': - "29" From f8af2fb0b6334cab36e493741f2d2c3fb391d564 Mon Sep 17 00:00:00 2001 From: YuvHayun Date: Tue, 9 Jul 2024 19:28:56 +0300 Subject: [PATCH 13/13] fix --- Packs/EDL/Playbooks/Modify_EDL.yml | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/Packs/EDL/Playbooks/Modify_EDL.yml b/Packs/EDL/Playbooks/Modify_EDL.yml index 579ce3831313..d09bcb0c54d6 100644 --- a/Packs/EDL/Playbooks/Modify_EDL.yml +++ b/Packs/EDL/Playbooks/Modify_EDL.yml @@ -635,9 +635,10 @@ tasks: '#none#': - "4" scriptarguments: - edlaction: + + genericexportindicatorsserviceaction: simple: ${inputs.EDL Action} - edlindicatorslist: + genericexportindicatorsserviceindicatorslist: complex: root: inputs.EDL Indicators List transformers: @@ -646,14 +647,6 @@ tasks: separator: value: simple: ',' - edlindicatortype: - simple: ${inputs.EDL Indicator Type} - edltag: - simple: ${inputs.EDL Tag} - genericexportindicatorsserviceaction: - simple: ${inputs.EDL Action} - genericexportindicatorsserviceindicatorslist: - simple: ${inputs.EDL Indicators List} genericexportindicatorsserviceindicatortype: simple: ${inputs.EDL Indicator Type} genericexportindicatorsservicetag: