Audit alert fields fix (demisto#29685)

tomer-pan · wolyslager · commit fb6bcb32e556 · 2023-10-02T11:31:19.000-05:00
* Add associated types to systemAssociatedTypes

* Add associated types to systemAssociatedTypes

* fix incident field structure

* RN
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Activity_Type.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Activity_Type.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_AppID.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_AppID.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Category.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Category.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Command.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Command.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Container.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Container.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_FQDN.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_FQDN.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Forensic.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Forensic.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "url",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Function.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Function.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Host.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Host.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Image.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Image.json
@@ -29,7 +29,11 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Vulnerability",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Interactive.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Interactive.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "boolean",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Kubernetes_Resource.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Kubernetes_Resource.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Labels.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Labels.json
@@ -29,7 +29,11 @@
     "selectValues": null,
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Vulnerability",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Line.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Line.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Log_File.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Log_File.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Message.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Message.json
@@ -28,7 +28,10 @@
     "selectValues": null,
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Raw_Alert_JSON.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Raw_Alert_JSON.json
@@ -31,7 +31,13 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Vulnerability",
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Cloud Discovery",
+        "Prisma Cloud Compute Compliance",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Region.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Region.json
@@ -29,7 +29,11 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Cloud Discovery",
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Rule.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Rule.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Runtime.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Runtime.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Service.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Service.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Type.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_Type.json
@@ -29,7 +29,11 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Compliance",
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_User.json b/Packs/PrismaCloudCompute/IncidentFields/incidentfield-Prisma_Cloud_Compute_User.json
@@ -28,7 +28,10 @@
     "selectValues": [],
     "sla": 0,
     "system": false,
-    "systemAssociatedTypes": null,
+    "systemAssociatedTypes": [
+        "Prisma Cloud Compute Audit",
+        "Prisma Cloud Compute Audit v2"
+    ],
     "threshold": 72,
     "type": "shortText",
     "unmapped": false,
diff --git a/Packs/PrismaCloudCompute/ReleaseNotes/1_4_12.md b/Packs/PrismaCloudCompute/ReleaseNotes/1_4_12.md
@@ -0,0 +1,27 @@
+
+#### Incident Fields
+
+Added associated types to systemAssociatedTypes. This fixes incident types association when updating the pack.
+- **Prisma Cloud Compute Activity Type**
+- **Prisma Cloud Compute Line**
+- **Prisma Cloud Compute User**
+- **Prisma Cloud Compute Rule**
+- **Prisma Cloud Compute FQDN**
+- **Prisma Cloud Compute Type**
+- **Prisma Cloud Compute Command**
+- **Prisma Cloud Compute Forensic**
+- **Prisma Cloud Compute Service**
+- **Prisma Cloud Compute Message**
+- **Prisma Cloud Compute Region**
+- **Prisma Cloud Compute Interactive**
+- **Prisma Cloud Compute Container**
+- **Prisma Cloud Compute Kubernetes Resource**
+- **Prisma Cloud Compute Function**
+- **Prisma Cloud Compute Category**
+- **Prisma Cloud Compute Log File**
+- **Prisma Cloud Compute Runtime**
+- **Prisma Cloud Compute Image**
+- **Prisma Cloud Compute Labels**
+- **Prisma Cloud Compute Host**
+- **Prisma Cloud Compute Raw Alert JSON**
+- **Prisma Cloud Compute AppID**
diff --git a/Packs/PrismaCloudCompute/pack_metadata.json b/Packs/PrismaCloudCompute/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Prisma Cloud Compute by Palo Alto Networks",
     "description": "Use the Prisma Cloud Compute integration to fetch incidents from your Prisma Cloud Compute environment.",
     "support": "xsoar",
-    "currentVersion": "1.4.11",
+    "currentVersion": "1.4.12",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
