IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  IBM SOAR inbound email - attach original email to the incident

    Posted 03/30/22 10:37 AM

    Hi Community,

     

    Is that possible to preserve the original email as an incident attachment when the SOAR creates the new incident with the inbound email capability? If yes, please share how to do this.

     

    Thanks, Csaba

     

     



  • 2.  RE: IBM SOAR inbound email - attach original email to the incident

    Posted 03/31/22 07:26 AM
    I'm pretty sure that the original email shows up on the Email tab of the incident:


    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



Related Content