IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Creating artifacts using CSV

    Posted 05/23/19 04:05 PM
    ​Is there the ability to create multiple artifacts for a given "artifact" type using a csv file?

    Example, we have a phishing incident in which 20 users click a link that was confirmed malicious.  Currently, we have to "manually" enter the users as artifacts, is it possible to have artifacts created automatically via file import?

    ------------------------------
    Gerald Trueblood
    ------------------------------


  • 2.  RE: Creating artifacts using CSV

    Posted 05/23/19 11:20 PM
    Hi Gerald,

    You can try to install Utility Function from App Exchange (https://exchange.xforce.ibmcloud.com/hub/extension/2b6699ac8a3976b67dfbddee26dbe3a5). It provides a workflow "Example: Create Artifacts From Excel Data".
    You can attach Excel file as an attachment and run the action to create artifacts from the file content. If you have to use csv file, you may need to create your own function, but you can use "Utilities: Excel Query" function as a reference.

    ------------------------------
    LILY WANG
    ------------------------------



  • 3.  RE: Creating artifacts using CSV

    Posted 07/30/19 04:03 PM
    Edited by Connor Costello 07/30/19 04:03 PM
    Hi Gerald,

    You can also use the url itself with your multiple artifacts.
    https://<resilienturl>/#external/add_artifacts_by_url?incident_id=XXX&artifacts[]=20,toto@toto.com&artifacts[]=20,toto2@toto2.com

    artifacts[]=20 is for "Email Recipient" artifact type. A confirmation page will be displayed before importing artifacts to your incident.

    ------------------------------
    Clément Fouque
    ------------------------------

    Original Message


  • 4.  RE: Creating artifacts using CSV

    Posted 12/05/19 09:28 AM
    Hi Lily, 

    Can you share a a sample CSV file to show the required format for it?
    Thanks,

    ------------------------------
    Qing Lan
    ------------------------------

    Original Message


Related Content