IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Azure AD sigins - want to fetch more column items into the data table

  • 1.  Azure AD sigins - want to fetch more column items into the data table

    Posted Mon March 04, 2024 09:07 AM

    Hi Team,

    By using the default given manual playbook "Azure Active Directory - Get Sigins" , I am able to fetch & get some columns till IP Address. But I want to fetch below field/column values into the same data table. I added columns in data table & edited the post processing script to fetch them. There is no error but its not fetching results into datatable. Attaching screenshots & readme file for this azure ad integration for reference.

    clientAppUsed
    conditionalAccessStatus
    isInteractive
    riskDetail
    riskLevelAggregated
    riskLevelDuringSignIn
    riskState
    riskEventTypes
    resourceDisplayName
    status
    deviceDetail
    location



    ------------------------------
    Neha BirendraPrasadSinha
    ------------------------------

    Attachment(s)

    pdf
    Azure_AD_README 1.pdf   1.10 MB 1 version


  • 2.  RE: Azure AD sigins - want to fetch more column items into the data table

    Posted Thu March 07, 2024 08:55 AM
    Edited by HENRY CHUANG Thu March 07, 2024 08:56 AM

    Hi Neha,

    Can you show me the section of the post processing script that you are trying to achieve that ?



    ------------------------------
    HENRY CHUANG
    ------------------------------

    Original Message


  • 3.  RE: Azure AD sigins - want to fetch more column items into the data table

    Posted Fri March 08, 2024 02:29 AM

    Hi Henry,

    Thank you for the support.

    I have made some changes in the post processing script and it is working now.



    ------------------------------
    Neha BirendraPrasadSinha
    ------------------------------

    Original Message