IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Pulling comments in bulk from Resilient

    Posted 06/17/20 07:46 AM
    Hello,

    We are currently integrating ServiceNow with IBM Resilient, and we are using a REST API to pull the incidents from IBM Resilient.

    We would like to understand whether there is anyway to pull comments in bulk for all of the incidents (filtered by a certain value).

    Currently, we have to pull the comments for each incident separately and make multiple API calls, which is not ideal from a performance perspective.

    Is there any way to ensure the comments can be pulled in bulk through one API call? If so, what are the properties that we need to set to ensure this is possible?

    ------------------------------
    Apoorva
    ------------------------------


  • 2.  RE: Pulling comments in bulk from Resilient

    Posted 06/17/20 01:18 PM
    Hi Apoorva,

    It looks like this is not currently possible using a single REST call.
    By the way are you using the Resilient supported integration for ServiceNow or is it your own bespoke
    integration?

    ------------------------------
    JOHN PRENDERGAST
    ------------------------------



Related Content