Skip to main content

Troubleshoot

Download With Dependencies

Use this pack to troubleshoot your environment.

This pack contains utilities for troubleshooting your environment.

When encountering issues, make sure to check out our Troubleshooting Guide.

Troubleshooting Playbook

This playbook is meant for automatic troubleshooting when encountering a problem with configuring an
instance or running a command.

The playbook will run the command/instance with several tests and will output a summary and a zip file with information
that you can later submit to the Cortex XSOAR support site

How to use

  • Configure a Core REST API integration instance.
  • Create a new incident of type "Integration Troubleshooting"
  • Troubleshoot type:
    • Use I'm unable to configure an instance if you fail to configure an integration (the test button returns an error).
      Note you must save this integration even if the test button fails.
    • Use I have a problem with running a command if you fail to run a particular command.
  • Instance Name: The name of the instance to troubleshoot.
  • Command Line: Fill if you used the command as the troubleshoot type. (The command name with all its arguments.)
  • Create the incident.
  • The playbook will collect the following information:
    • Instance configuration (without sensitive information such as the password or api keys).
    • Logs of running the Test button with several configurations.
    • Logs of executing the command (if you picked command in Troubleshoot type).
  • A summary will be posted to the War Room alongside a zip file that will contain all collected information.
  • With this information you can submit a bug to the Cortex XSOAR support site.

This pack contains utilities for troubleshooting your environment.

When encountering issues, make sure to check out our Troubleshooting Guide.

Troubleshooting Playbook

This playbook is meant for automatic troubleshooting when encountering a problem with configuring an
instance or running a command.

The playbook will run the command/instance with several tests and will output a summary and a zip file with information
that you can later submit to the Cortex XSIAM support site

How to use

  • Configure a Core REST API integration instance.
  • Create a new incident of type "Integration Troubleshooting"
  • Troubleshoot type:
    • Use I'm unable to configure an instance if you fail to configure an integration (the test button returns an error).
      Note you must save this integration even if the test button fails.
    • Use I have a problem with running a command if you fail to run a particular command.
  • Instance Name: The name of the instance to troubleshoot.
  • Command Line: Fill if you used the command as the troubleshoot type. (The command name with all its arguments.)
  • Create the incident.
  • The playbook will collect the following information:
    • Instance configuration (without sensitive information such as the password or api keys).
    • Logs of running the Test button with several configurations.
    • Logs of executing the command (if you picked command in Troubleshoot type).
  • A summary will be posted to the War Room alongside a zip file that will contain all collected information.
  • With this information you can submit a bug to the Cortex XSIAM support site.

PUBLISHER

Cortex

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByCortex
CreatedOctober 11, 2020
Last ReleaseApril 1, 2024
WORKS WITH THE FOLLOWING INTEGRATIONS:
DISCLAIMER
Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.