IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Generate weekly report from incidents

    Posted Tue December 19, 2023 09:50 AM

    Hello SOAR experts,

    Is there a way to create a report to include high or medium severity cases within the last 7 days.? I don't mean creating report from a particular case/incident.

    Thank you



    ------------------------------
    benlinux
    ------------------------------


  • 2.  RE: Generate weekly report from incidents

    Posted Wed December 20, 2023 09:07 AM

    Hello,

    I will appreciate a help here.

    Regards,



    ------------------------------
    benlinux
    ------------------------------



  • 3.  RE: Generate weekly report from incidents

    Posted Wed December 20, 2023 10:51 AM

    Hi there -

    Yes, this is in fact quite easy to accomplish. From the incidents/cases list view, set the timeframe that you wish to create the report for. Then set any other filters you wish (severity, case status, etc...). Once you have the list of cases that you want in front of you (be sure to expand the list size (max 500) if you want to include all cases in the report), select all cases (click the check mark above the first case in the list). This will select all cases and will then expose a menu of options which includes the option "Export". From the "Export" drop down you can select "Generate Report" which then gives you the option to generate a report in the template that you wish.

    I hope this helps!



    ------------------------------
    Bo Bleckel
    ------------------------------



  • 4.  RE: Generate weekly report from incidents

    Posted Wed December 20, 2023 11:57 AM

    Thank you, 

    This works. Also can you configure the SOAR platform to send the generated report to certain recipient using SMTP server??

    Regards,



    ------------------------------
    benlinux
    ------------------------------



  • 5.  RE: Generate weekly report from incidents

    Posted Wed December 20, 2023 01:13 PM

    Not that I know of. The report will need to be manually created and downloaded. Then it can be disseminated however you and your organization choose fit.



    ------------------------------
    Bo Bleckel
    ------------------------------