IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Notification for Not modified incidents

  • 1.  Notification for Not modified incidents

    Posted Mon October 30, 2023 11:16 AM

    I have created a custom field for the last modification time. In the notifications, I want to check this field and if 3 days have passed since the last modification, I want an email to be sent to the person. At the point checked in the notification, if the incident status is active and the last modification date is past by 3 days, I want an email to be sent. However, it's not sending. What could be the source of the problem, or how can I trigger this situation?



    ------------------------------
    Yusuf AKARSU
    ------------------------------