Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Cortex XDR] support for multiple endpoint statuses #25792

Merged
merged 17 commits into from Apr 16, 2023
Merged

[Cortex XDR] support for multiple endpoint statuses #25792

merged 17 commits into from Apr 16, 2023

Conversation

ennozdd
Copy link
Contributor

@ennozdd ennozdd commented Apr 10, 2023

Contributing to Cortex XSOAR Content

Make sure to register your contribution by filling the contribution registration form

The Pull Request will be reviewed only after the contribution registration form is filled.

Status

  • In Progress
  • Ready
  • In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

Added support for multiple endpoint statuses for the command xdr-get-endpoints-by-status

Screenshots

image

Minimum version of Cortex XSOAR

  • 6.0.0
  • 6.1.0
  • 6.2.0
  • 6.5.0

Does it break backward compatibility?

  • Yes
    • Further details:
  • No

Must have

  • Tests
  • Documentation

@content-bot content-bot added the Contribution Thank you! Contributions are always welcome! label Apr 10, 2023
@content-bot content-bot changed the base branch from master to contrib/ennozdd_cortex April 10, 2023 11:19
@content-bot
Copy link
Collaborator

Thank you for your contribution. Your generosity and caring are unrivaled! Make sure to register your contribution by filling the Contribution Registration form, so our content wizard @samuelFain will know the proposed changes are ready to be reviewed.

@@ -766,6 +766,12 @@ script:
- disconnected
- lost
- uninstalled
- windows
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@content-bot content-bot added Community Contribution Form Filled Whether contribution form filled or not. labels Apr 10, 2023
Copy link
Contributor

@samuelFain samuelFain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ennozdd Thank you so much for your contribution, I appreciate your patience!
Added a few minor comments - please review them.

Also, since you changed xdr-get-endpoints-by-status command status argument to support a list of values, it will be appropriate to change the command argument description accordingly in CortexXDRIR.yml
For example: 'A comma-separated list of endpoint statuses to filter.'

Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.yml Outdated Show resolved Hide resolved
Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.py Outdated Show resolved Hide resolved
ennozdd and others added 3 commits April 13, 2023 16:40
Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>
Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>
@ennozdd
Copy link
Contributor Author

ennozdd commented Apr 13, 2023

@samuelFain done

Comment on lines 763 to 764
auto: PREDEFINED
predefined:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just noticed this,
If we want to allow a comma separated list as a command argument input, we should add isArray: true.
Also, for the same status argument, we have a predefined list of values, which as far as i know allows only one value as an input and not an array.
I think it should be one or the other and not both.
If the intended use is as your screenshot in the PR's description, i think the array option is the way to go here.
(The predefined list of options can be added in the description to help the users).

@samuelFain samuelFain added the pending-contributor The PR is pending the response of its creator label Apr 13, 2023
@ennozdd
Copy link
Contributor Author

ennozdd commented Apr 14, 2023

@samuelFain done

@samuelFain samuelFain removed the pending-contributor The PR is pending the response of its creator label Apr 16, 2023
Copy link
Contributor

@samuelFain samuelFain left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ennozdd Amazing job!
Please correct this last description to match with the new and better description for status argument, so that we may proceed to merge this PR.

Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.yml Outdated Show resolved Hide resolved
@samuelFain samuelFain added the pending-contributor The PR is pending the response of its creator label Apr 16, 2023
Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>
@ennozdd
Copy link
Contributor Author

ennozdd commented Apr 16, 2023

@samuelFain done

@samuelFain samuelFain added docs-approved ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR. and removed pending-contributor The PR is pending the response of its creator labels Apr 16, 2023
@content-bot
Copy link
Collaborator

For the Reviewer: Successfully created a pipeline in Gitlab with url: https://code.pan.run/xsoar/content/-/pipelines/5052131

@samuelFain samuelFain merged commit fa4e459 into demisto:contrib/ennozdd_cortex Apr 16, 2023
23 checks passed
samuelFain added a commit that referenced this pull request Apr 17, 2023
* added support for multiple statuses

* release notes

* docker image

* fixing units

* mypy

* mypy errors

* release note name change

* line ends with .

* Update Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.py



* Update Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.yml



* modifications according to comments

* from predefined to array

* ok

* syntax error

* Update Packs/CortexXDR/Integrations/CortexXDRIR/CortexXDRIR.yml



---------

Co-authored-by: Enes Özdemir <49711791+ennozdd@users.noreply.github.com>
Co-authored-by: samuelFain <65926551+samuelFain@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Community Contribution Form Filled Whether contribution form filled or not. Contribution Thank you! Contributions are always welcome! docs-approved ready-for-instance-test In contribution PRs, this label will cause a trigger of a build with a modified pack from the PR.
Projects
None yet
3 participants