diff --git a/Packs/EDL/Integrations/EDL/README.md b/Packs/EDL/Integrations/EDL/README.md index 9889b0ff216f..f2f55d5e1957 100644 --- a/Packs/EDL/Integrations/EDL/README.md +++ b/Packs/EDL/Integrations/EDL/README.md @@ -170,15 +170,8 @@ In order to get the list of all available fields to search by, you can configure ### Access the Export Indicators Service by Instance Name (HTTPS) - For Cortex XSOAR 6.x only -**Note**: -- By default, the route is open without security hardening and might expose you to network risks. Cortex XSOAR recommends that you use credentials to connect to the integration. -- For Cortex XSOAR 8 and Cortex XSIAM, you can only access the Export Indicators Service using a third-party tool such as cURL. - - On a tenant, use https://ext-/xsoar/instance/execute/\ - - For example: curl -v -u user:pass https://ext-mytenant.paloaltonetworks.com/xsoar/instance/execute/edl_instance_01\?q\=type:ip - - On an engine, use http://\:\/ - - For example: curl -v -u user:pass http://\:\/?n=50 +**Note:** By default, the route is open without security hardening and might expose you to network risks. Cortex XSOAR recommends that you use credentials to connect to the integration. + To access the Export Indicators service by instance name, make sure ***Instance execute external*** is enabled. @@ -188,6 +181,18 @@ To access the Export Indicators service by instance name, make sure ***Instance `https://**/instance/execute/**` +### Access EDLs on Cortex XSOAR 8 and Cortex XSIAM + +For Cortex XSOAR 8 and Cortex XSIAM, you can only access the Export Indicators Service using a third-party tool such as cURL. +- On a tenant, use https://ext-/xsoar/instance/execute/\ + + For example: curl -v -u user:pass https://ext-mytenant.paloaltonetworks.com/xsoar/instance/execute/edl_instance_01\?q\=type:ip +- On an engine, use http://\:\/ + + For example: curl -v -u user:pass http://\:\/?n=50 + +For EDLs running on the server in Cortex XSOAR 8, basic authentication is mandatory. For EDLs running on engines, basic authentication is optional but recommended + ### URL Inline Arguments