IBM Security QRadar SOAR

 View Only
  • 1.  Close incident with script

    Posted Wed April 20, 2022 12:52 PM
    Is there a simple way to close an incident with a script? Alternatively any apps in app exchange that has this functionality?

    Mark Aksen

  • 2.  RE: Close incident with script

    Posted Fri April 22, 2022 08:53 AM
    Hi Mark,

    I'm happy to say that, yes, we have that capability in an app: Incident Utils See the function for closing an incident. It does require a template to be used for setting the required fields for your environment. But the default template can be used as a guide for the standard required fields: Resolution and Resolution Summary.


    Mark Scherfling