From Chronicle soar, while i attempting to download data from the search field, I am encountering a limit set at 1000 records. This restriction prevents me from downloading more than 1000 records. Upon reviewing the request payload, I confirmed that the limit is indeed set to 1000.
Is there a way to modify this setting to allow for unlimited data downloads?
Hello,
in the search for what component? Are you talking about case search?
Hello,
in the search for what component? Are you talking about case search?
yes, We have integrated SOAR with QRadar, and when an offense is created in QRadar, a new case is generated in Google SOAR. Currently, I am attempting to export a report of cases from the past month, which contains over 1900 cases. However, I am restricted to downloading only 1000 case details as a CSV file. When I click on "Export," I receive a message indicating that the export limit is set to 1000.
Is there a way to modify this limit to allow for the export of all cases?
yes, We have integrated SOAR with QRadar, and when an offense is created in QRadar, a new case is generated in Google SOAR. Currently, I am attempting to export a report of cases from the past month, which contains over 1900 cases. However, I am restricted to downloading only 1000 case details as a CSV file. When I click on "Export," I receive a message indicating that the export limit is set to 1000.
Is there a way to modify this limit to allow for the export of all cases?
I’m going to say probably not without an FR. There may be an API call that could export more.
However, I’d personally just export it twice and be done with it.
yes, We have integrated SOAR with QRadar, and when an offense is created in QRadar, a new case is generated in Google SOAR. Currently, I am attempting to export a report of cases from the past month, which contains over 1900 cases. However, I am restricted to downloading only 1000 case details as a CSV file. When I click on "Export," I receive a message indicating that the export limit is set to 1000.
Is there a way to modify this limit to allow for the export of all cases?
Which API are you calling?
I would look if that API supports pagination (i.e. size 1000, page2)
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.