IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

IBM SOAR inbound email - attach original email to the incident

  • 1.  IBM SOAR inbound email - attach original email to the incident

    Posted Wed March 30, 2022 10:37 AM

    Hi Community,

     

    Is that possible to preserve the original email as an incident attachment when the SOAR creates the new incident with the inbound email capability? If yes, please share how to do this.

     

    Thanks, Csaba

     

     



  • 2.  RE: IBM SOAR inbound email - attach original email to the incident

    Posted Thu March 31, 2022 07:26 AM
    I'm pretty sure that the original email shows up on the Email tab of the incident:


    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message


Related Content