IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Rule that creates notes automatically

    Posted Fri January 24, 2020 03:36 AM
    Hello, 

    Im trying to create a automatic rule which could create a custom note during the incident creation. But I see that something fails. Because when it creates the incident, the notes field is blank. Any suggestions?

    Thank you
    The rule config is not working... whats the problem?


    ------------------------------
    Aitor Vivanco Sata Cruz
    ------------------------------


  • 2.  RE: Rule that creates notes automatically

    Posted Mon January 27, 2020 03:49 AM
    Hi Aitor,

    I think you should select object type as Incident if you want to process when incident created. Then you can create a basic script which will add note to incident with incident.addNote() function as you can see below:


    Then select Run Script from rule creation and that should be fine. I hope this helps.


    ------------------------------
    Burak Karaca
    ------------------------------

    Original Message


Related Content