IBM Security QRadar SOAR

 View Only
  • 1.  Add notes to task within a script

    Posted Fri April 16, 2021 09:45 AM
    Hello,

    I have a script written that will parse the email data and append the replies to an incident's note section. I know the function: "incident.addNote()" can accomplish this but is it possible to add the notes under a specific task?

    Thanks,
    Terry

    ------------------------------
    Terry Z.
    ------------------------------


  • 2.  RE: Add notes to task within a script

    Posted Fri April 16, 2021 03:32 PM
    Hi Terry,

    Similar to incident.addNote() there is also a task.addNote() you can call from a script.

    We also have a IBM Resilient Task Helper Functions on the App Exchange if you want to add a note from a function.
     
    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------



  • 3.  RE: Add notes to task within a script

    IBM Champion
    Posted Fri April 16, 2021 03:36 PM
    Hi @Terry Z.  -- this is not currently possible from in-product scripting. A function could accomplish this, but as far as scripting abilities go, you cannot modify items outside of scope of a script. Meaning, if your script is firing on an incident, than the script can only access fields of the incident, and not it's tasks or notes.

    The exception to this is that you can add custom tasks (not templated tasks from the phases customization settings) and notes to an incident from a script. If creating a custom task with instructions that are in the note today accomplishes your goal, then this could work via incident.AddTask()​

    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------