IBM Security QRadar SOAR

 View Only
  • 1.  Bring Deleted Incidents Back to Resilient

    Posted Tue November 24, 2020 04:13 AM
    Hi ,

    Is possible to bring deleted Incidents back to resilient? 

    Best
    Jasmine


    ------------------------------
    Jasmine
    ------------------------------


  • 2.  RE: Bring Deleted Incidents Back to Resilient

    IBM Champion
    Posted Tue November 24, 2020 10:16 AM
    Edited by Jared Fagel Tue November 24, 2020 10:16 AM
    There is no recycle bin or native way to do this, but if it's a big enough deal, you may be able to check with Support and see if they can restore you to a previous state if you're using SaaS.


    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------



  • 3.  RE: Bring Deleted Incidents Back to Resilient

    Posted Wed November 25, 2020 02:29 AM
    Hi Jasmine,

    You could use resSystemRestore to another Resilient instance assuming you took a backup prior to the deletion?

    What you are asking for is not in the product so it's better that you raise a new idea or vote for an existing one for Offering Management to consider. There are some ideas that might be similar here -> https://2e4ccba981d63ef83a875dad7396c9a0.ideas.aha.io/ideas/search?utf8=%E2%9C%93&query=restore

    ------------------------------
    BEN WILLIAMS
    ------------------------------