IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Using Data Table data in Outbound Email

  • 1.  Using Data Table data in Outbound Email

    Posted Wed August 21, 2019 01:00 PM
    I am wondering if anyone has been able to use data table data in the outbound email FTL scripts.

    I was using a field to do this for user data, but have recently moved to using a data table to more easily track multiple users, but one of the problems I am having now is that I am unable to determine how to structure my FTL variable to get the email address out to send it to a certain email from my data table like I did with the field, incident.properties.offender_email_address.

    On a side note, if you have this working for you how did you deal with having multiple rows in a data table with user emails. For instance if I want to send an email to each one of the users in a data table, how would I go about doing this?

    Thanks!

    ------------------------------
    Nick Mumaw
    ------------------------------