Great! Thanks for the suggestion.
Original Message:
Sent: Mon October 07, 2024 03:55 AM
From: Yohji Amano
Subject: How to do time calculation from current time in SOAR playbook
Hi Raymond
The following is my experiences to put python3 variable data into SOAR date time picker fields.
Given that you use
python3
SOAR date time picker fields: start_time, end_time
Script is like this:
from datetime import datetime, timedelta
end_time = datetime.fromisoformat('2024-10-08T00:00:000+07:00')
start_time = end_time - timedelta(days=7)
incident.properties.start_time = int(start_time.timestamp()*1000)
incident.properties.end_time = int(end_time.timestamp()*1000)
To put python variable data into a SOAR date time picker field, there are some points:
1. convert python variable data from datetime fields to timestamp() object (msec)
2. Then result data should be multiplied with 1000 to convert to microsecond order. (with decimal point)
3. Since SOAR date time picker field only accept integer, convert decimal point to integer.
------------------------------
Yohji Amano
Original Message:
Sent: Fri October 04, 2024 04:40 PM
From: Raymond Tam
Subject: How to do time calculation from current time in SOAR playbook
I have an API integration that needs to specific the search start and end timestamps.
Can I do time calculation in the SOAR playbook?
For example, if I want to search 7 days of data.
Start Time: 10/1/2024T00:00:000-07:00 (This field will be calculated using current time - 7 days)
End Time: 10/8/2024T00:00:000-07:00 (This field will be fill by current time value)
I looked up some examples on the Internet, some suggested to use the timedelta module, but SOAR doesn't recognize the function.
------------------------------
Raymond Tam
------------------------------