IBM Security QRadar SOAR

 View Only
  • 1.  How can I send reminder mail with IBM Security Qradar SOAR?

    Posted Sun September 11, 2022 07:01 PM

    Hello team,

    For example, we send an incident by mail via IBM Security Qradar SOAR. However, if there is no response to this e-mail within two days, we want to send a reminder e-mail. Is there an article or a text to guide on this topic? How can we do this?

    Thanks


    #Support
    #QradarSOAR
    #SupportMigration


  • 2.  RE: How can I send reminder mail with IBM Security Qradar SOAR?

    Posted Mon September 19, 2022 02:00 PM

    This should be doable using the timer events.

    Can you please check out this documentation?

    https://www.ibm.com/docs/en/sqsp/45?topic=workflows-using-timer-events


    #Support
    #QradarSOAR
    #SupportMigration


  • 3.  RE: How can I send reminder mail with IBM Security Qradar SOAR?

    Posted Mon September 19, 2022 02:16 PM

    Hi MPrabir,

    First of all, thanks for your return. We designed a workflow using the Timer function. Here, for example, SOAR will send the reminder email after 24 hours, but the person in question replied at the 15th hour, so we don't need to send the reminder email. In the remaining 9 hours, this timer function will have worked in vain in the background. What kind of control mechanism should be put in order to prevent this? Do you have a comment?


    #Support
    #SupportMigration
    #QradarSOAR


  • 4.  RE: How can I send reminder mail with IBM Security Qradar SOAR?

    Posted 24 days ago

    Sir, 
    what if i needed to send reply to same email thread using meg Id which created in the first email.

    Thanks 



    ------------------------------
    Khaled Nasr
    ------------------------------



  • 5.  RE: How can I send reminder mail with IBM Security Qradar SOAR?

    Posted 23 days ago

    Hi Khaled,

    Take a look at the outbound email app, with the function send_email2 (https://exchange.xforce.ibmcloud.com/hub/extension/caafba4e4f6d130e7db30ed4d5e53504). It supports an input field to specify the original message Id. There is an email conversation datatable maintained which does include message Ids for use with replying to messages. 

    Hope this helps,

    Mark



    ------------------------------
    Mark Scherfling
    ------------------------------