List of Contributions

Didac Cornet

Contact Details

My Content

1 to 11 of 11 total

Long Workflow execution

Posted By Didac Cornet Thu July 02, 2020 08:11 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi all, We have a doubt on how to implement a long time execution workflow where once the action is triggered and workflow starts, we want to poll the ticket status in a third party system periodically. SCENARIO: detecting when a ticket in a third party platform is closed periodically after the ...

RE: Remove/Prevent Duplicate Entries in Data Table Based On a Single Column

Posted By Didac Cornet Tue June 30, 2020 04:09 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi Ben, We are interested in that primary key to avoid duplicated entries in datatables also. Was the idea accepted and if so, do you have an estimated date for that feature? I've tried to reach the ideas page but I can't. ------------------------------ Didac Cornet ---------------------- ...

Resilient Data Feeder via proxy

Posted By Didac Cornet Tue August 06, 2019 09:29 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi, I would like to know if it's possible to use Resilient Data Feeder Component with a http proxy between Resilient and SQL Server. Thanks in advance, Dídac Cornet ------------------------------ Didac Cornet ------------------------------

Custom Trheat Service

Posted By Didac Cornet Fri June 14, 2019 08:21 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hello, I want a Custom Threat Service to be triggered only for 'Email Sender' Artifacts. According to documentation and examples, I should add the type 'email.header.sender_address' on the handler but is not working (similarly to 'email.header.to' is for 'Email Recipient' Artifacts). As a workaround ...

RE: Pause / Sleep function for delaying WorkFlows less than 15 minutes

Posted By Didac Cornet Fri May 24, 2019 08:39 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi AnnMarie, Thanks for your answer. Regards, Dídac. ------------------------------ Didac Cornet ------------------------------

RE: Pause / Sleep function for delaying WorkFlows less than 15 minutes

Posted By Didac Cornet Thu May 16, 2019 04:48 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hello, I'm using the Timer function provided in fn_utils_1.0.7. The goal is to execute a Worfklow with 2 main branches: branch 1: routine A (Timer1 in screenshot. It takes 10 seconds to finish) branch 2: a timeout routine if routine A not finished within an specified time (Timer 2 and ...

RE: Incident PUT vs PATCH

Posted By Didac Cornet Mon May 06, 2019 09:51 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi, I would know if is possible to PATCH/PUT the same field in multiple Incidents in one query. In other words, update multiple tickets in one query. I found the method PATCH in IncidentREST endpoint in the Interactive and Reference API page, but any payload example is shown there. Could you provide ...

Pause / Sleep function for delaying WorkFlows less than 15 minutes

Posted By Didac Cornet Thu March 28, 2019 10:58 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi, For stopping a resilient during less than 15 minutes (what the built-in gadget permits), is possible to create a function in python that calls time.spleep() method for stopping the whole worfklow desired time using an input for specifying minutes, seconds... Next link contains a function that ...

RE: Get Username from within a Workflow

Posted By Didac Cornet Wed March 13, 2019 01:12 PM
Found In Egroup: IBM Security QRadar SOAR \ view thread
​Thank you very much Shane. Finally I've used caller = event.message['principal']['name'] in a function in the Workflow and adding it to results as workaround. Then i get it from results output on Post-Process Script. Great that you added that functionality in v32. We will update soon. Thanks! ...

RE: Extract nested Json fields

Posted By Didac Cornet Tue March 12, 2019 06:48 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi, Note that 'stats' key is inside report. Use: results.get('report').get('stats').get('secureRequests') Regards, Dídac. ------------------------------ Didac Cornet ------------------------------

Get Username from within a Workflow

Posted By Didac Cornet Tue March 12, 2019 06:36 AM
Found In Egroup: IBM Security QRadar SOAR \ view thread
Hi, I would like to know if it's posible to get the username or user identifier of the user who triggered a rule from Post-Process script of a Workflow. (User executes a Menu-Item Rule > Workflow is called > Note added after execution). The idea is to add a note containing the user that launched ...