IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Workflow calls another workflow

    Posted Mon November 16, 2020 08:42 PM
    I have a workflow that has 3 workflows inside and at the end one works to send mail.
    Each of the workflows, performs a task and at the end write a note, but each of those outputs I need to send by mail in the final function.



    How can I achieve this?

    Try to use "workflow.addProperty (String <property_name>, Dict <property_value>)" but I always get error "'NoneType' object has no attribute 'email1'"



    Any suggestion?


    ------------------------------
    Juan Cruz Del Col
    ------------------------------


  • 2.  RE: Workflow calls another workflow

    Posted Tue November 17, 2020 07:08 AM
    Unfortunately workflow properties set in a sub workflow are not available to other workflows. Neither the parent that called it or other ones downstream. So you will have to do a workaround for this. One way to do this is to:

    1) Create a custom incident property that will hold the data you need for sending the email. Most likely the easiest thing to do is create a text field as you can put a JSON string in there.
    2) In the workflows, read the incident property, convert the text to a json format, or a python dictionary. Then update the property with the new information.
    3) In the parent, get the incident property and parse it to pass to the function input appropriately.

    We are actively designing ways to significantly improve this type of developer experience. This will help us in this process.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: Workflow calls another workflow

    Posted Tue November 17, 2020 07:21 AM
    Thank you very much for the quick answer.

    A member of my team thought something similar with a "Table" to send by mail.

    The truth is that every time we think about doing something, we notice that both the new AppHost and the development of workflos lack a lot of maturity!!!!

    Regards,
    Juan Cruz

    ------------------------------
    Juan Cruz Del Col
    ------------------------------