IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Task Notes to a Data Table

    Posted 01/30/23 08:40 AM
    I was working on creating the below script for moving notes to a data table but I was noticing there does not appear to be a "task.notes" variable. Does anyone know if this is possible or potentially making the below work? 

    if task is not None:
    row = incident.addRow("task_notes")
    row.task_id = task.id
    row.task_name = task.name
    row.notes = task.note

    ------------------------------
    Josh Chappell
    ------------------------------


  • 2.  RE: Task Notes to a Data Table

    Posted 01/31/23 12:05 AM
    Hi Josh,

    You should ask this in IBM Security QRadar SOAR community but you have asked this in IBM Security QRadar (which is basically meant for SIEM).

    You can add note to two objects which are incident and task and both have their own functions.
    For incident, incident.addNote() and there is also a task.addNote() you can call from a script.  But it goes to the respective notes location and not in a data table.  But you can surely ask this in the IBM Security QRadar SOAR community for further suggestions from the QRadar SOAR community.

    ------------------------------
    Prabir Meher
    ------------------------------