IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  "Asset Name" field into the template of the email in Rule Action

    Posted Tue December 03, 2024 02:24 AM

    Hello,

    I need to insert the value of the "Asset Name" field into the template of the email sent as Rule Action. How can I do it?

    Thanks in advance,

    bye

    Simona



    ------------------------------
    Simona Vittori
    ------------------------------


  • 2.  RE: "Asset Name" field into the template of the email in Rule Action

    Posted Wed December 11, 2024 04:47 AM

    Hello, 

    If you refer to the follwoing documentation:
    https://www.ibm.com/docs/en/qradar-on-cloud?topic=notifications-configuring-event-flow-custom-email

    I believe you can use AQLCustomProperty in the format like:

     ${body.AqlCustomProperty("AQL-PROPERTY-NAME")} 

    https://www.ibm.com/docs/en/qsip/7.5?topic=spot-tips-tricks-customizing-email-templates&mhsrc=ibmsearch_a&mhq=body%26period%3BAqlCustomProperty

    Regards



    ------------------------------
    Comghall Morgan
    QRadar Support Architect
    IBM
    ------------------------------

    Original Message