IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Script to add to single select field

    Posted 06/01/21 02:04 PM
    I have seen examples on how to update multiselect fields, but I am having difficulty finding anything that shows if it is possible to update a single select field.
    What I am looking to do is take a value from a text field and add it to the list of selectable items in a "select" field.
    Any suggestions?

    ------------------------------
    Tim Gray
    ------------------------------


  • 2.  RE: Script to add to single select field

    Posted 06/02/21 05:36 AM
    Hi Tim,

    Updating a field definition (adding new options to the select field) is not possible in a script. This would have to be done in a function by interacting with the rest API. The endpoint for updating fields is:
    PUT /orgs/{org_id}/types/{type}/fields/{field}​

    I didn't notice any existing functions that perform this operation, but maybe it's included in one of the utilities functions i'm not aware of. You can see all of the functions here IBM Security App Exchange



    ------------------------------
    Sean Mc Cann
    ------------------------------