IBM Security QRadar SOAR

 View Only
  • 1.  Outbound Email for SOAR - Unable to receive the emails as Reply

    Posted Thu October 20, 2022 10:45 AM
      |   view attached
    Hello There, 

    Upgraded the Outbound Email App on SOAR version 46.1.47. Send email works fine, however the response as "reply from"not seen in the Email Conversation Tab, As per the pre-process script from Workflow "Outbound Email Reply to Message" # change this reflect a different message-id domain, as neeced
    #MESSAGE_ID_DOMAIN = "qradarsoar.ibm.com" 
    have changed it to the same as the SMTP server name, still not getting the mails. 

    What is the procedure to get the response here?
    inputs.mail_to = row['from']  have made static as in #inputs.mail_to = "abc@example.com" only then I will be able to use the Rule Outbound Email: Reply to Message  . 
    In this case, if we do not get the reply on the data table then the whole workflow fails. 

    1 :  Has anyone achieved it, am I missing something in the config. Please see the screenshot attached for your reference. 
    2 : Is there any doc for the templates, like how to use and where to pick it from, if anyone has the sample template, would be very helpful. 
    Thanks in advance. 



    ------------------------------
    Srinivas Joshi
    Security Delivery Specialist
    ------------------------------


  • 2.  RE: Outbound Email for SOAR - Unable to receive the emails as Reply

    Posted Wed October 26, 2022 04:17 PM
    Hello,

    Can you provide a screenshot of the action status for more information on how the workflow fails? Additionally, refer to the README under the "Enhancements for Multiple Templates and Attachment & Notes Inclusion" Section for more information on using the sample template.

    ------------------------------
    Christopher Chang
    ------------------------------



  • 3.  RE: Outbound Email for SOAR - Unable to receive the emails as Reply

    Posted Wed June 21, 2023 09:00 AM

    Hi Team
    I have installed outbound email application. Getting this error while testing the configuration
    fn-outbound-email: timed out selftest: failure selftest output: {'state': 'failure', 'reason': 'Failed to send test email with error:timed out'} Elapsed time: 80.092000 seconds

    How to resolve this issue?



    ------------------------------
    Suganya N
    ------------------------------