IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Notification for Not modified incidents

  • 1.  Notification for Not modified incidents

    Posted Mon October 30, 2023 11:16 AM

    I have created a custom field for the last modification time. In the notifications, I want to check this field and if 3 days have passed since the last modification, I want an email to be sent to the person. At the point checked in the notification, if the incident status is active and the last modification date is past by 3 days, I want an email to be sent. However, it's not sending. What could be the source of the problem, or how can I trigger this situation?



    ------------------------------
    Yusuf AKARSU
    ------------------------------