IBM Security QRadar SOAR

 View Only
  • 1.  Workflow and action

    Posted Mon June 29, 2020 11:10 AM
    Hi,

    I want to use action inside workflow. Is this possible? I have so many actions that I have written before and I don't want to rewrite them as function.

    Any advice or documentation would be appreciated.

    Thanks in advance

    ------------------------------
    Jasmine
    ------------------------------


  • 2.  RE: Workflow and action

    Posted Mon June 29, 2020 01:16 PM
    Is there any solution for this? Seems that action doesn't trigger inside workflow

    ------------------------------
    Jasmine
    ------------------------------



  • 3.  RE: Workflow and action

    Posted Mon June 29, 2020 02:43 PM

    I have tried this solution but it didn't solve the problem. 
    https://community.ibm.com/community/user/security/communities/community-home/digestviewer/viewthread?MessageKey=3491aa1c-2118-4f4c-9fc5-4d76c2298751&CommunityKey=d2f71e8c-108e-4652-b59c-29d61af7163e&tab=digestviewer#bm3491aa1c-2118-4f4c-9fc5-4d76c2298751

    2020-06-29 21:39:38,339 INFO [actions_component] Action: _unnamed_
    2020-06-29 21:39:38,339 INFO [actions_component] Event: <_unnamed_[] (id=None, workflow=ntest, user=aa@aa.com) 2020-06-29 18:26:05.442000> Channel: actions.aaa
    ​


    ------------------------------
    Jasmine
    ------------------------------