Release Notes for Cisco XDR 2.48

Default value in JSONPath query

Now you have the option to set a default value for the result of a JSONPath query. We’ve added Override with specified value if query doesn't return a result within the properties of the query activity. Enable the option under the query and you can provide a value matching the data type to be used as a fallback in case the query returns no result. The result no longer being empty can help prevent the workflow from failing if downstream logic is expecting a consistent structure.

Object and array data types in JSONPath and XPath queries

We’ve added support for both object and array data types to the JSONPath Query and XPath Query core activities. Now both Object and Array are available in the Property Type drop-down menu.