Add fetch lookback functionality to Palo Alto Enterprise DLP

[kamalq97]

Related Issues

fixes: CIAC-16732

Description

• Added support for the Fetch Lookback Window (minutes) parameter, which can be used to configure the number of minutes to look back during each fetch to capture late-indexed incidents.

[marketplace-ai-reviewer]

🤖 Analysis started. Please wait for results...

[content-bot]

🤖 AI-Powered Code Review Available

You can leverage AI-powered code review to assist with this PR!

Available Commands:

• @marketplace-ai-reviewer start review - Initiate a full AI code review
• @marketplace-ai-reviewer re-review - Incremental review for new commits

[github-actions]

Coverage Report

File	Stmts	Miss	Cover	Missing
Packs/Palo_Alto_Networks_Enterprise_DLP/Integrations/Palo_Alto_Networks_Enterprise_DLP
Palo_Alto_Networks_Enterprise_DLP.py	386	63	83%	82–84, 100–102, 111, 120–121, 143, 150–151, 177, 190, 355, 401–404, 406–408, 410–411, 439–443, 445, 619, 646–647, 667–668, 671–672, 700–701, 703–705, 707–708, 710, 752, 781–794, 796, 798–799
TOTAL	386	63	83%

Tests	Skipped	Failures	Errors	Time
33	0 💤	0 ❌	0 🔥	2.868s ⏱️

[marketplace-ai-reviewer]

🤖 AI Review Disclaimer

This review was generated by an AI-powered tool and may contain inaccuracies. Please be advised, and we extend our sincere apologies for any inconvenience this may cause.

[marketplace-ai-reviewer]

Hi there! Thanks for contributing to the Palo Alto Networks Enterprise DLP pack. I've reviewed your changes and have a few quick adjustments for you.

Please update the pack metadata to align with XSOAR support standards (author, URL, and keywords) and ensure the integration YAML starts with the name or display key rather than category. In the Python code, consider adding a unit test for the new migration function and updating a stale comment regarding the removed fetch IDs.

Thanks again for your work on this!

Additionally, please address the following file-level notes:

• Packs/Palo_Alto_Networks_Enterprise_DLP/Integrations/Palo_Alto_Networks_Enterprise_DLP/Palo_Alto_Networks_Enterprise_DLP.yml: The .yml file must start with the name or display key. Currently, it starts with category.
• Packs/Palo_Alto_Networks_Enterprise_DLP/pack_metadata.json: - The support field is set to xsoar, but the author and url fields do not match the required values for XSOAR-supported packs. Please update them to:
• author: Cortex XSOAR (or Cortex)
• url: https://www.paloaltonetworks.com/cortex
• The keywords list is currently empty. Please add the vendor name (e.g., Palo Alto Networks) to the keywords array.

@kamalq97 please review and approve the results generated by the AI Reviewer by responding 👍 on this comment.

[content-bot]

Validate summary
The following errors were thrown as a part of this pr: .
If the AG100 validation in the pre-commit GitHub Action fails, the pull request cannot be force-merged.

Verdict: PR can be force merged from validate perspective? ✅

[content-bot]

🔍 AI Triage Report Available

An automated triage report has been generated for this pipeline.

Status: success
Report ID: 4d4c4150459f32f1

📋 Triage Report

⚠️ AI-generated triage. Validate before acting.