IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

How to show list of all incident's artifacts in one Email using SOAR Incident Outbound Email APP?

  • 1.  How to show list of all incident's artifacts in one Email using SOAR Incident Outbound Email APP?

    Posted Tue May 13, 2025 09:06 AM

    Hello everyone,

    I'm working on an automation task to send emails using SOAR Incident Outbound Email APP. I need the email body to be including all the incidents' artifacts values with all the different artifacts type.

    wishing to have an anser from anyone who faced the same issue and found a solution for it.

    Thank you in advance,



    ------------------------------
    Mohamed El-Prince
    ------------------------------


  • 2.  RE: How to show list of all incident's artifacts in one Email using SOAR Incident Outbound Email APP?

    Posted Wed May 14, 2025 01:24 AM

    Hi Mohamed ,

    check out the jinja template that can achieve what you want , Playbooks/Outbound Email Playbooks/example_incident_artifacts_email.jinja at main · TheIRGurus/Playbooks · GitHub .

    you might need to make some modifications of course.



    ------------------------------
    Mohamad islam Hamadieh
    I post SOAR content and tips on linkedIn , follow me :)
    https://linkedin.com/in/mohamadislam
    ------------------------------

    Original Message


Related Content