diff --git a/Packs/EDL/Integrations/EDL/README.md b/Packs/EDL/Integrations/EDL/README.md index cc0578b43748..efdad00fadb9 100644 --- a/Packs/EDL/Integrations/EDL/README.md +++ b/Packs/EDL/Integrations/EDL/README.md @@ -1,5 +1,6 @@ Use the Generic Export Indicators Service integration to provide an endpoint with a list of indicators as a service for the system indicators. -For Cortex XSOAR 8, see [Manage External Dynamic Lists in the Cortex XSOAR Administrator Guide](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Manage-External-Dynamic-Lists). + +The Generic Export Indicators Service integration is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. ## PAN-OS EDL Management to Export Indicators Service (PAN-OS EDL Service) migration steps @@ -8,7 +9,7 @@ Unlike `PAN-OS EDL Management`, this integration hosts the EDL on the Cortex XSO 1. Convert existing EDL lists to indicators in Cortex XSOAR. This can be done automatically: 1. Extract your EDL as a text file from the web server it's currently hosted on. 2. Upload it as a file to the Playground and use the `ExtractIndicatorsFromTextFile` automation. e.g., `!ExtractIndicatorsFromTextFile entryID=` -2. Go to the `Indicators` page and [filter (Cortex XSOAR 6.13)](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.13/Cortex-XSOAR-Administrator-Guide/Indicators) or [filter (Cortex XSOAR 8 Cloud)](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Indicator-concepts) or [filter(Cortex XSOAR 8.7 On-prem)](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Indicator-concepts) to find all of the indicators you extracted from the text file. +2. Go to the `Indicators` page in [Cortex XSOAR 6.13](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.13/Cortex-XSOAR-Administrator-Guide/Indicators), [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Indicator-concepts), [Cortex XSOAR 8.7 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Indicator-concepts), or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) to find all of the indicators you extracted from the text file. 3. If needed, batch select the indicators and add a tag to the indicators you want to host as a specific EDL. Use this tag in the `Indicator Query` integration parameter when configuring the integration. For example, if you want to create an allowed list of indicators and a blocked list of indicators. 4. Edit the EDL object on the PAN-OS device to pull from the `Export Indicators Service (PAN-OS EDL Service)` instance, as explained in [Access the Export Indicators Service by Instance Name (HTTPS)](#access-the-export-indicators-service-by-instance-name-https). You can edit the EDL object using the [panorama-edit-edl](https://xsoar.pan.dev/docs/reference/integrations/panorama#panorama-edit-edl) command in the `Palo Alto Networks PAN-OS` integration. 5. Commit and push the configuration from the Panorama device to its respective Firewalls using the [PAN-OS Commit Configuration](https://xsoar.pan.dev/docs/reference/playbooks/pan-os-commit-configuration) playbook. diff --git a/Packs/GenericWebhook/Integrations/GenericWebhook/README.md b/Packs/GenericWebhook/Integrations/GenericWebhook/README.md index 37ed6ade8f4d..5ebcaa3436cd 100644 --- a/Packs/GenericWebhook/Integrations/GenericWebhook/README.md +++ b/Packs/GenericWebhook/Integrations/GenericWebhook/README.md @@ -1,4 +1,6 @@ -The Generic Webhook integration is used to create incidents on event triggers. The trigger can be any query posted to the integration. +The Generic Webhook integration is used to create incidents on event triggers. The trigger can be any query posted to the integration. + +The Generic Webhook integration is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. ## Configure Generic Webhook on Cortex XSOAR diff --git a/Packs/MicrosoftGraphTeams/Integrations/MicrosoftGraphTeams/README.md b/Packs/MicrosoftGraphTeams/Integrations/MicrosoftGraphTeams/README.md index b06e5423213f..aa758c890706 100644 --- a/Packs/MicrosoftGraphTeams/Integrations/MicrosoftGraphTeams/README.md +++ b/Packs/MicrosoftGraphTeams/Integrations/MicrosoftGraphTeams/README.md @@ -1,5 +1,7 @@ Microsoft Graph lets your app get authorized access to a user's Teams app in a personal or organization account. +This is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. + ## Configure O365 Teams (Using Graph API) in Cortex diff --git a/Packs/PingCastle/Integrations/PingCastle/README.md b/Packs/PingCastle/Integrations/PingCastle/README.md index 821ac1fd3d53..0675a10bf294 100644 --- a/Packs/PingCastle/Integrations/PingCastle/README.md +++ b/Packs/PingCastle/Integrations/PingCastle/README.md @@ -1,6 +1,8 @@ This integration will run a server that will listen for PingCastle XML reports. This integration was integrated and tested with version 6.0.0 of PingCastle. +PingCastle is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. + ## Configure PingCastle in Cortex diff --git a/Packs/Syslog/Integrations/Syslogv2/README.md b/Packs/Syslog/Integrations/Syslogv2/README.md index 402f9867aa80..9ad021eaa1d8 100644 --- a/Packs/Syslog/Integrations/Syslogv2/README.md +++ b/Packs/Syslog/Integrations/Syslogv2/README.md @@ -1,5 +1,9 @@ A Syslog server enables opening incidents automatically from Syslog clients. This integration supports converting to incidents, filtered logs or all logs. + +This integration is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. + This integration was integrated and tested with RFC3164 and RFC5424 formats of Syslog. + ## Notes - **Important**: Supported log formats: RFC3164, RFC5424, RFC6587 (with RFC3164 or RFC5424) - **Important**: Do not use an engine group for this integration. It can cause the integration to run on a different engine, and the Syslog server may send logs to an IP for which Syslog is not configured. diff --git a/Packs/TAXIIServer/Integrations/TAXII2Server/README.md b/Packs/TAXIIServer/Integrations/TAXII2Server/README.md index ef11ac284b41..d8bbf646c28a 100644 --- a/Packs/TAXIIServer/Integrations/TAXII2Server/README.md +++ b/Packs/TAXIIServer/Integrations/TAXII2Server/README.md @@ -3,6 +3,8 @@ This integration provides TAXII2 Services for system indicators (outbound feed). You can choose to use TAXII v2.0 or TAXII v2.1. +The TAXII2 Server integration is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. + ## Configure Collections Each TAXII collection in the integration is represented by a Cortex XSOAR indicator query. diff --git a/Packs/TAXIIServer/Integrations/TAXIIServer/README.md b/Packs/TAXIIServer/Integrations/TAXIIServer/README.md index c1ca3a595cd6..d7d4eda31323 100644 --- a/Packs/TAXIIServer/Integrations/TAXIIServer/README.md +++ b/Packs/TAXIIServer/Integrations/TAXIIServer/README.md @@ -2,6 +2,8 @@ This integration provides TAXII Services for system indicators (Outbound feed). +The TAXII Service integration is a long-running integration. For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. + ## Configure Collections Each TAXII collection in the integration is represented by a Cortex XSOAR indicator query. diff --git a/Packs/WebFileRepository/Integrations/WebFileRepository/README.md b/Packs/WebFileRepository/Integrations/WebFileRepository/README.md index 72c612c08c80..674a3326faa3 100644 --- a/Packs/WebFileRepository/Integrations/WebFileRepository/README.md +++ b/Packs/WebFileRepository/Integrations/WebFileRepository/README.md @@ -1,5 +1,6 @@ Simple web server with a file uploading console to store small files. -This is helpful to make your environment ready for testing purpose for your playbooks or automations to download files from a web server. + +Helps make your environment ready for testing purpose for your playbooks or automations to download files from a web server. NOTE: For more information about long-running integrations, see the [Cortex XSOAR 8 Cloud](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Forward-Requests-to-Long-Running-Integrations), [Cortex XSOAR 8 On-prem](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Integration-commands-in-the-CLI) or [Cortex XSIAM](https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Administrator-Guide/Forward-Requests-to-Long-Running-Integrations) documentation. ## Configure Web File Repository in Cortex