IBM QRadar SOAR

 View Only

 We would like to confirm whether the following functionalities currently exist in SOAR or can be implemented using SOAR-provided APIs or server-side scripts

FDX Networks's profile image
FDX Networks posted Thu April 17, 2025 01:47 AM

We would like to confirm whether the following functionalities currently exist in SOAR or can be implemented using SOAR-provided APIs or server-side scripts:

Script or API for checking SOAR service status and mitigating load

A shell script that diagnoses the level of service load or issues and performs a service restart (limited to cases where restarting the service can resolve the issue).

We would also like to include an email notification at the point of service restart, to log the restart time and confirm whether the service has returned to normal.

Automatically restarting or retrying via SOAR or API

While it is currently possible to configure cancellation based on certain conditions, restarting requires either manually recreating the incident or manually restarting the playbook.

We would like to know if it's possible to implement automatic restarts via API or internal SOAR logic. In addition, we want to include a limit on the number of automatic retries and, when the retry threshold is exceeded, send an error message or notification email.

Please confirm whether these functions are available or can be implemented with SOAR’s existing capabilities.