IBM Security QRadar SOAR

 View Only

Modifying "Lookup sys_id" to return full api request instead of just the sys_id

  • 1.  Modifying "Lookup sys_id" to return full api request instead of just the sys_id

    Posted Mon February 26, 2024 01:02 PM

    Hello,

    I want to modify the out of the box function "Lookup sys_id" to return all fields instead of just "sys_id". My SN dev told me he can customize the integration on his end to change the global input fields "sn_query_field" and "sn_query_value" to something more generic that would function as a full query string instead, somethign like "sn_query_string" that would allow us to write a full API call instead of being restricted by passing one value for each of the two inputs. 

    My concern is that despite this, I will still only receive the sys_id. Has anyone modified this integration to return a full API response instead of just the sys_id? 



    ------------------------------
    Dylan Diamond
    ------------------------------