hello,
is there an elegant way to transfer the email attachment of an incoming email to the apphost for further processing?
my first thought is to add it as incident attachment, then using a rule + workflow to trigger a function on the apphost (transmit the incident id and then get the attachment via qradar's api)
is there a better solution? can the file be pushed to the apphost instead of being pulled by it, like described above?
many thanks for any hint which could point me to the right direction of further researching this issue
------------------------------
petre b
------------------------------