IBM QRadar

 View Only
Expand all | Collapse all

Workflow XML - increment the bookmark timestamp by 1ms

  • 1.  Workflow XML - increment the bookmark timestamp by 1ms

    Posted 2 days ago

    I am working on a workflow.xml file for the Universal Cloud RestFul API.   The bookmark value will return the timestamp in this format: 2025-01-28T16:36:19.121Z.  I am trying to increment the timestamp value by 1 ms.   what is the best way to accomplish this?   I tried the adddate function but they don't exist in QRadar workflow.  Below is my Bookmark update section.

    Example of timestamp increment:
    2025-01-28T16:36:19.121Z  (current value)
    2025-01-28T16:36:19.122Z  (New value)

           <!-- Update the Bookmark -->
            <If condition="/search/body != null">
                <Set path="/bookmark" value="${/search/body[0]/created}" />
            </If>



    ------------------------------
    Raymond Tam
    ------------------------------