Skip to main content

Create EDL Instance

Download With Dependencies

An automation script for creating EDL instances on XSOAR.

This pack adds the ability to create EDL instances on XSOAR from a playbook.
Specify a indicator query and instance name to create the EDL.
The allocated ports are tracked in an XSOAR list to ensure duplicate ports aren't used.

Setup Notes

You should first create an XSOAR list which can be used to keep track of the
ports which have been allocated by this automation.
If there are existing EDLs these ports should be added to the new list in a
comma seperated fashion.

A Demi$to REST API integration also needs to be configured for correct operation.


Nicholas Ericksen


Cortex XSOARCortex XSIAM


Supported ByCommunity
CreatedJanuary 19, 2022
Last ReleaseMay 8, 2022

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.