Edit Dbot Incident and Indicator Suggestions
Edit Dbot incident and indicator suggestions in Cortex XSOAR 6.13.
In the Investigation Canvas, Dbot provides suggestions in the Entity Library section and the Quick View window. You can change these suggestions by adding keys and values when adding a server configuration.
Select Settings → About → Troubleshooting → Add Server Configuration.
Add the following keys and values as required:
KeyDescriptioncanvas.suggestions.IncidentIndicatorSuggestions.maxMaximum number of suggestions for malicious suggestions. Default: 5
Relevant for Library and Quick View.
canvas.suggestions.IncidentMutualIndicatorSuggestions.maxMaximum number of suggestions for common indicators between incidents. Default: 5
Relevant for Library and Quick View.
canvas.suggestions.IndicatorIndicatorSuggestions.maxMaximum number of suggestions for indicators. Default: 5
Relevant for Quick View.
ml.suggestions.canvas.leftpane.incidents.limitMaximum number of incidents in the Quick View window. Default: 10
Relevant for Quick View.
Last updated
Was this helpful?
