IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Workflow and action

    Posted 06/29/20 11:10 AM
    Hi,

    I want to use action inside workflow. Is this possible? I have so many actions that I have written before and I don't want to rewrite them as function.

    Any advice or documentation would be appreciated.

    Thanks in advance

    ------------------------------
    Jasmine
    ------------------------------


  • 2.  RE: Workflow and action

    Posted 06/29/20 01:16 PM
    Is there any solution for this? Seems that action doesn't trigger inside workflow

    ------------------------------
    Jasmine
    ------------------------------



  • 3.  RE: Workflow and action

    Posted 06/29/20 02:43 PM

    I have tried this solution but it didn't solve the problem. 
    https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?MessageKey=3491aa1c-2118-4f4c-9fc5-4d76c2298751&CommunityKey=d2f71e8c-108e-4652-b59c-29d61af7163e&tab=digestviewer#bm3491aa1c-2118-4f4c-9fc5-4d76c2298751

    2020-06-29 21:39:38,339 INFO [actions_component] Action: _unnamed_
    2020-06-29 21:39:38,339 INFO [actions_component] Event: <_unnamed_[] (id=None, workflow=ntest, user=aa@aa.com) 2020-06-29 18:26:05.442000> Channel: actions.aaa
    ​


    ------------------------------
    Jasmine
    ------------------------------