IBM Security SOAR

Expand all | Collapse all

How can I access the data table

  • 1.  How can I access the data table

    Posted Tue October 01, 2019 08:44 AM
    I am automating the integration process  of Resilient with other applications. The API response that resilient receives from other application, stores in the data table which is internal to it. Is there any way I can connect to these data tables and fetch the information.

    ------------------------------
    Gyana Swain
    ------------------------------


  • 2.  RE: How can I access the data table

    Posted Tue October 01, 2019 10:32 AM
    Take a look at the source code of the  'Data Table Helper Functions' here.

    Specifically, this looks like it may be helpful for you:
    def get_data(self):
    """ Function that gets all the data and rows of a Data Table using the Resilient API """

    uri = "/incidents/{0}/table_data/{1}?handle_format=names".format(self.incident_id, self.api_name)

    try:
    self.data = self.res_client.get(uri)
    self.rows = self.data["rows"]
    except Exception:
    raise ValueError("Failed to get {0} Datatable".format(self.api_name))

    I've not done this as of yet, so you may need to play around with the data returned by the REST client.

    ------------------------------
    Jared Fagel
    Cyber Security Analyst Intern
    Public Utility
    ------------------------------



  • 3.  RE: How can I access the data table

    Posted Tue June 29, 2021 11:08 AM
    Is there any way to implement this within a post-script and not a function? I'm looking to manipulate data tables (more than one row) after a function has returned its API response.

    Thanks,
    Tom

    ------------------------------
    Tom Prenderville
    ------------------------------



  • 4.  RE: How can I access the data table

    Posted Wed June 30, 2021 08:37 AM
    It is not possible to get access to full incident data using in product scripting currently.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------