IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Workflow and action

    Posted Mon June 29, 2020 11:10 AM
    Hi,

    I want to use action inside workflow. Is this possible? I have so many actions that I have written before and I don't want to rewrite them as function.

    Any advice or documentation would be appreciated.

    Thanks in advance

    ------------------------------
    Jasmine
    ------------------------------


  • 2.  RE: Workflow and action

    Posted Mon June 29, 2020 01:16 PM
    Is there any solution for this? Seems that action doesn't trigger inside workflow

    ------------------------------
    Jasmine
    ------------------------------



  • 3.  RE: Workflow and action

    Posted Mon June 29, 2020 02:43 PM

    I have tried this solution but it didn't solve the problem. 
    https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?MessageKey=3491aa1c-2118-4f4c-9fc5-4d76c2298751&CommunityKey=d2f71e8c-108e-4652-b59c-29d61af7163e&tab=digestviewer#bm3491aa1c-2118-4f4c-9fc5-4d76c2298751

    2020-06-29 21:39:38,339 INFO [actions_component] Action: _unnamed_
    2020-06-29 21:39:38,339 INFO [actions_component] Event: <_unnamed_[] (id=None, workflow=ntest, user=aa@aa.com) 2020-06-29 18:26:05.442000> Channel: actions.aaa
    ​


    ------------------------------
    Jasmine
    ------------------------------