IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Artifact to Field Script

    Posted Thu April 27, 2023 02:15 PM

    I am creating a script to create a field off an artifact, however I am running into issues when there are multiple artifact values. If i have multiple artifact values, is there a way to get all artifact values into one field?
    i.e:
    say there are three artifacts for username, it is possible to have one field that shows all three in a string? (a1000, a1001, a1002) even if the artifacts are all their separate items? 



    ------------------------------
    Jenna Pecar
    ------------------------------