IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SOAR SLA Timers

    Posted Fri August 25, 2023 07:01 AM

    Good day All

    I am looking to do some SLA Timers in SOAR that can do minutes and not just days.

    Does any one have some advise for me on this please?



    ------------------------------
    Arno Pretorius
    ------------------------------


  • 2.  RE: SOAR SLA Timers

    Posted Fri August 25, 2023 10:35 AM

    I did find a Playbook on SLA Timers but it does not work  in our environment so I had to convert it back to a Workflow but I am getting errors now when I run the workflow.

    Script condition from Workflow 'SLA Timers' running on Incident 'SLA Timer Test' was unable to complete because:
    NotAConditionError: 'if (incident.properties.sla_minutes_left > incident.properties.sla_alert_in_minutes): result = True else: result = False' is not a conditional statement



    ------------------------------
    Arno Pretorius
    ------------------------------

    Original Message


  • 3.  RE: SOAR SLA Timers

    Posted Tue September 05, 2023 05:09 AM

    If I understated the error correctly you need to modify the condition to include the condition only and not an entire if statement



    ------------------------------
    mohamad islam hamadieh
    ------------------------------

    Original Message


Related Content