IBM Security QRadar SOAR

 View Only
The Discussion forum is the ideal place to ask questions of your peers and the IBM subject matter experts. We also welcome you to share best practices and pitfalls to avoid so that we may learn together as a Community.

Make sure to read the Community Netiquette before posting, and please be aware that your first post will be moderated by a site admin and therefore won't publish immediately.

Search Discussions

1 to 50 of 791 threads (5.6K total posts)
  Thread Subject Replies Last Post Status
Create a Playbook to add an IP address to the blocklist text file and a create a ServiceNow ticket to record the activity
4 yesterday by Nick Mumaw
Original post by Raymond Tam
Scheduling A Playbook in SOAR using SOAR Scheduler App
2 yesterday by Mark Scherfling
Original post by Cyber SOC Engineering
How to publish app from Docker to Github
5 2 days ago by Yohji Amano
Original post by Swapnil Rupnawar
Get Input From Task
6 3 days ago by ken ching
Original post by Dũng Đặng
Close incident with script
4 3 days ago by Dũng Đặng
Original post by Mark Aksen
Export / Import from Suite SOAR to Standalone SOAR
1 4 days ago by ken ching
Not able to post nested json using call rest API function in resilient SOAR
0 5 days ago by Swapnil Rupnawar
ActiveMQ BrokerService[detachedBroker - Received fatal alert: certificate_unknown (Received fatal alert: certificate_unknown)
2 6 days ago by Lucian Sipos
Parse Utilities Function for SOAR - Get Complete Header from .EML
3 7 days ago by Maria Czapkowska
Original post by ken ching
Issue with Pulling and Unpacking Docker Image from ghcr.io
1 8 days ago by Yohji Amano
Original post by shivam gote
How to specify a pem file in a Playbook
0 9 days ago by Yongwon Song
Waiting for automation playbook
4 11 days ago by Dũng Đặng
Create SLA notification in SOAR
0 12 days ago by Ravoth PN
Fetch incident via API with a limit
3 14 days ago by AnnMarie Norcross
Original post by Ekham Ramdul
How to exit() a script
0 14 days ago by Pierre Dufresne
Automatic Incident Response to Notify User via IBM SOAR
8 15 days ago by SOC Team
how to create a new View or edit current view
0 18 days ago by Lucas Marino
Use the network utility app to add IP address from a text file on Linux system
5 19 days ago by Raymond Tam
REST API to integrate SOAR with BMC Remedy
3 23 days ago by Erwin Friethoff
Original post by Makram Aoun
MISP error while creating incident
3 27 days ago by AnnMarie Norcross
Original post by Janeesh George
Custom SOAR app with multiple values
2 28 days ago by Luqman Nur
Falcon Sandbox with rest api
1 28 days ago by Maria Czapkowska
Incident Assignment Notification
2 28 days ago by Gilbert Liao
Original post by Ahmad Hassan Tariq
Offense escalation in QRadar SOAR
3 29 days ago by BEN WILLIAMS
Original post by karan kisnani
Artifact to attachment
2 one month ago by Mark Scherfling
Original post by Maria Czapkowska
QRadar SOAR Plugin App can not Automatic Escalation
1 one month ago by BEN WILLIAMS
Original post by 界佑 陳
Incident Assignment Notification
3 one month ago by SOC Team
Original post by Ahmad Hassan Tariq
Get the timestamp of last submitted incident from SOAR server
2 one month ago by LEON GONG
Integration requires HMAC and BASE64 modules which are not available for SOAR Scripts
4 one month ago by Bo Bleckel
Original post by ken ching
execute playbooks with SOAR REST API
2 one month ago by Joao Joao Baptista Dias Moreira
fn_crowd_strike app and event stream
1 one month ago by John Quirke
Original post by Maria Czapkowska
auto IP blocking on Hits detected
4 one month ago by Khaled Nasr
RFI: Future of IBM SOAR
3 one month ago by Christopher Meenan
Original post by Jared Fagel
REST API for extracting latest incident timestamp
0 one month ago by LEON GONG
search_ex API usage question
3 one month ago by Bo Bleckel
Original post by Yohji Amano
Creation of a select / multiselect custom field for users
3 one month ago by John Quirke
Original post by mohamad islam hamadieh
Sending an attachment to a sandbox
4 one month ago by Maria Czapkowska
SOAR in AIRgab enviroment
6 one month ago by Nick Mumaw
Original post by osama ahmed
REST API Function - Get the token and use the token to make an API call.
3 one month ago by Bo Bleckel
Original post by Raymond Tam
Getting Error while Running Scripts
2 one month ago by BEN WILLIAMS
Original post by Shashi swami
Default Login for .OVA
2 one month ago by Jorge Torres
Original post by Stephen Allen
Create an Incident by API Rest without Resilient
2 2 months ago by Juan Parentini
Separate Notes Widget in two tabs
2 2 months ago by Juan Parentini
Get Excel report for custom Dashboard in IBM resilient SOAR
0 2 months ago by Swapnil Rupnawar
Steps and document to create custom app in Resilient
4 2 months ago by Swapnil Rupnawar
Fn Outbound Emails No Template Found
4 2 months ago by Richard Swierk
Original post by Walaa Kabbani
Getting Error while Running Scripts
0 2 months ago by Shashi swami
SOAR API performance issue
6 2 months ago by Aya Elsayed
Tracking SLAs for security incidents using QRadar SOAR
0 2 months ago by Anuj Shrivastava
Custom (select / multiseclect) field not displaying in the incident layout
5 2 months ago by Dillip Nath
Original post by Sha Ben