Core api multiple entries error

[anas-yousef]

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Related Issues

fixes: https://jira-dc.paloaltonetworks.com/browse/XSUP-31868

Description

Added the option to run the command core-api-multipart subsequently in the playbook Process Email - Generic v2 by using the automation UploadFile with the option isArray: true.

Must have

• Tests
• Documentation

[JasBeilin]

Looks good, please see my comments.

[idovandijk]

Changes look OK, but do we still need to check if the Core API integration is enabled if we use this script?
Also was this tested successfully on XSOAR 8? You can forward an EML file to a phishing inbox, it should trigger that flow in the playbook

[anas-yousef]

@idovandijk
I believe so, since the script UploadFile relies on the command core-api-multipart.

[anas-yousef]

Concerning testing this on XSOAR 8, I checked the script UploadFile by creating a new playbook that uses it, and saw that it is able to run on multiple entry IDs, and upload the attachments to the relevant incident.
@idovandijk I sent you in private so we can test the whole flow of the playbook in XSOAR 8

[idovandijk]

Concerning testing this on XSOAR 8, I checked the script UploadFile by creating a new playbook that uses it, and saw that it is able to run on multiple entry IDs, and upload the attachments to the relevant incident. @idovandijk I sent you in private so we can test the whole flow of the playbook in XSOAR 8

Need to verify that the newly uploaded files show up in the layout