Configure the Indicator Timeline
Configure and improve the indicator timeline in Cortex XSOAR 6.13.
A large number of indicators can affect performance of the indicator timeline. The indicator timeline displays a list of dates and events that affect the timeline, such as change of verdict, traffic light protocol, etc. There are several advanced server configurations you can implement to manage the indicator timeline performance.
Go to Settings → ABOUT → Troubleshooting.
In the Server Configuration section, click Add Server Configuration.
KeyValueDescriptionindicator.timeline.enabledtrueorfalseEnables the indicator timeline in all flows. The default is
true.indicator.timeline.enabled.type.<indicatorType>trueorfalseEnables the indicator timeline for a specific indicator type. This configuration overrides the
indicator.timeline.enabledconfiguration.For example:
indicator.timeline.enabled.type.ipindicator.timeline.auto.extract.enabledtrueorfalseEnables the indicator timeline in the indicator extraction flow. The default is
true.indicator.timeline.max.sizeNumber
The maximum number of indicator comments (timeline and regular). The default is 100.
indicator.timeline.worker.enabledtrueorfalseEnables you to add timeline comments through content integrations.
Last updated
Was this helpful?
