IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Outbound Email for SOAR - Unable to receive the emails as Reply

  • 1.  Outbound Email for SOAR - Unable to receive the emails as Reply

    Posted Thu October 20, 2022 10:45 AM
      |   view attached
    Hello There, 

    Upgraded the Outbound Email App on SOAR version 46.1.47. Send email works fine, however the response as "reply from"not seen in the Email Conversation Tab, As per the pre-process script from Workflow "Outbound Email Reply to Message" # change this reflect a different message-id domain, as neeced
    #MESSAGE_ID_DOMAIN = "qradarsoar.ibm.com" 
    have changed it to the same as the SMTP server name, still not getting the mails. 

    What is the procedure to get the response here?
    inputs.mail_to = row['from']  have made static as in #inputs.mail_to = "abc@example.com" only then I will be able to use the Rule Outbound Email: Reply to Message  . 
    In this case, if we do not get the reply on the data table then the whole workflow fails. 

    1 :  Has anyone achieved it, am I missing something in the config. Please see the screenshot attached for your reference. 
    2 : Is there any doc for the templates, like how to use and where to pick it from, if anyone has the sample template, would be very helpful. 
    Thanks in advance. 



    ------------------------------
    Srinivas Joshi
    Security Delivery Specialist
    ------------------------------


  • 2.  RE: Outbound Email for SOAR - Unable to receive the emails as Reply

    Posted Wed October 26, 2022 04:17 PM
    Hello,

    Can you provide a screenshot of the action status for more information on how the workflow fails? Additionally, refer to the README under the "Enhancements for Multiple Templates and Attachment & Notes Inclusion" Section for more information on using the sample template.

    ------------------------------
    Christopher Chang
    ------------------------------