IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Best Practices for working with Datatables

    Posted 01/11/19 05:11 AM
    Data Tables are a customizable UI component provided by the Resilient Platform which can be used to create custom tables that you define to group information in a way, that is meaningful to your organisation. 

    This thread can serve as a place to share best practices and convenient ways to use Data Tables to convey ordered sets of data.

    Using Data Tables with Dates and Times

    When using a Data Table column to represent a timestamp, ensure to use the Date Time Picker Field type.
    The reason for this is; depending on your organisational structure, you may have analysts or other end users in different geographical regions to yourself. Using a Text Area Field to represent a timestamp means you will need to define which format the timestamp should be in. The result of this is, all your users will need to adjust to this one timestamp format.

    Alternatively, you can use the Date Time Picker Field type which will enable you to provide an epoch value for your field rather than a timestamp string. The benefit, is that when you do it this way, the application can handle the appropriate datetime format for you, and will be dynamically presented in a format, determined by the end users locale.


    Share any techniques you have in relation to Data Tables which you feel bring value to your Playbook Design or Integration development process.

    ------------------------------
    Ryan Gordon
    ------------------------------


  • 2.  RE: Best Practices for working with Datatables

    Posted 09/16/19 09:32 AM
    Wondering if anyone has a best practice for editing data table rows? 

    I'm thinking right now I'll have to use a function to read all of the contents of a specified data table, edit the certain cells I want to change, clear the data in the table and then write the updated data to the table. 

    Does anyone have any better ideas?

    ------------------------------
    Liam Mahoney
    ------------------------------



  • 3.  RE: Best Practices for working with Datatables

    Posted 09/17/19 04:33 AM
    Hi Liam,
    You are right in thinking a function would be a good way to do this but you might not have to write out the logic yourself. We have a community submission which provides a number of Datatable Utility functions; one of which is for updating a rows contents.

    Here is a link to the documentation on that function from our github:
    https://github.com/ibmresilient/resilient-community-apps/tree/master/fn_datatable_utils#function---update-row
    Heres a link to the submission available on the App Exchange:
    https://exchange.xforce.ibmcloud.com/hub/extension/c3b2e7a1a38f3e249c540d3b49fad459

    That being said, I would be interested in hearing any other ideas on a good way to get this done.

    ------------------------------
    Ryan Gordon
    Security Software Engineer
    IBM
    ------------------------------