IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Assigning Group in incident owner instead of single user.

  • 1.  Assigning Group in incident owner instead of single user.

    Posted Mon November 13, 2023 02:37 AM

    I'm using default Inbound email script i was wondering if i can add group as incident owner in my script instead of single user. I'm not sure how to add group in current script since there is no email address for group. 

    current text is newIncidentOwner = "umair.maqsood@xyz.com"



    ------------------------------
    Umair Khan
    ------------------------------


  • 2.  RE: Assigning Group in incident owner instead of single user.

    Posted Mon November 13, 2023 11:38 AM
    Edited by SOAR Engineer Mon November 13, 2023 11:43 AM

    Hi Umair,

    Please try below:

    newIncidentOwner = "Your Group Name"

    Example: newIncidentOwner = "CSIRT Group"



    ------------------------------
    SOAR Engineer
    ------------------------------

    Original Message