IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Using Resilient REST API in Playbook

    Posted 04/19/22 10:14 AM
    How can I use the Resilient REST API in a playbook? For instance, let's say I want to call DataTableDataREST endpoint (GET /orgs/{org_id}/incidents/{inc_id}/table_data). How would I go about doing that?

    And is there an endpoint in the REST API to query a specific field in a given incident?

    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Using Resilient REST API in Playbook

    Posted 04/22/22 08:55 AM
    Hi Mark,

    We have another app on the AppExchange for managing datatables from functions which you place into your playbook. See https://exchange.xforce.ibmcloud.com/hub/extension/c3b2e7a1a38f3e249c540d3b49fad459.

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------