IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Assigning Group in incident owner instead of single user.

  • 1.  Assigning Group in incident owner instead of single user.

    Posted Mon November 13, 2023 02:37 AM

    I'm using default Inbound email script i was wondering if i can add group as incident owner in my script instead of single user. I'm not sure how to add group in current script since there is no email address for group. 

    current text is newIncidentOwner = "umair.maqsood@xyz.com"



    ------------------------------
    Umair Khan
    ------------------------------


  • 2.  RE: Assigning Group in incident owner instead of single user.

    Posted Mon November 13, 2023 11:38 AM
    Edited by SOAR Engineer Mon November 13, 2023 11:43 AM

    Hi Umair,

    Please try below:

    newIncidentOwner = "Your Group Name"

    Example: newIncidentOwner = "CSIRT Group"



    ------------------------------
    SOAR Engineer
    ------------------------------

    Original Message