IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Automate Assigned To field in QRadar from Incident Owner in Resilient

  • 1.  Automate Assigned To field in QRadar from Incident Owner in Resilient

    Posted Thu July 16, 2020 02:53 PM
    All,

    I'm trying to see if I can automate the process of when a Resilient incident owner changes that it also updates the QRadar Assigned To field. The QRadar integration doesn't seem to cover this so I'm assuming I would need to do it by other means (script or workflow connecting via API). Has anyone done this or can someone point me to any sample scripts / code that might help me through this which I could integrate into an Automatic Rule?

    Thanks!


    ------------------------------
    Mr Coco
    ------------------------------


Related Content