IBM Security QRadar SOAR

 View Only
  • 1.  Set top-level Incident from with an Incident script.

    Posted yesterday

    Do we have something similar but from within an Incident script:

    I just want to set the top-level incident to an incident that I got as result of an incident query.



    ------------------------------
    mohamad islam hamadieh
    ------------------------------


  • 2.  RE: Set top-level Incident from with an Incident script.

    Posted 21 hours ago

    Hi Mohamad,

    Unfortunately, there is not an equivalent script method once in an incident. We do have an app, fn_soar_utils.search_incidents which can be used in a similar way. I think this is a good idea which would be a good enhancement if you'd like to request it in our ideas portal:  https://ideas.ibm.com/

    Regards,

    Mark



    ------------------------------
    Mark Scherfling
    ------------------------------