Palo Alto Networks · Example Payload

Cortex Xsoar Api Incident Example

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR

Cortex Xsoar Api Incident Example is an example object payload from Palo Alto Networks, with 20 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

idnametypestatusseverityownercreatedmodifiedoccurredclosedcloseReasoncloseNoteslabelsdetailsinvestigationIdplaybookIdsourceInstancesourceBrandrawJsonCustomFields

Example Payload

Raw ↑ 
{
  "id": "example-id",
  "name": "Production Policy 07",
  "type": "standard",
  "status": 1,
  "severity": 0,
  "owner": "example-owner",
  "created": "2024-06-01T06:29:18Z",
  "modified": "2025-03-09T18:45:26Z",
  "occurred": "2025-03-28T07:00:57Z",
  "closed": "2024-08-25T08:57:34Z",
  "closeReason": "Violation monitoring and and endpoint under activity suspicious.",
  "closeNotes": "Blocked network firewall applied blocked updated firewall for applied.",
  "labels": [
    {
      "type": "default",
      "value": "example-value"
    },
    {
      "type": "custom",
      "value": "example-value"
    }
  ],
  "details": "Endpoint updated policy endpoint network and.",
  "investigationId": "878313",
  "playbookId": "831515",
  "sourceInstance": "example-sourceInstance",
  "sourceBrand": "example-sourceBrand",
  "rawJson": "example-rawJson",
  "CustomFields": {}
}