IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Multiselect field for Playbook

    Posted Thu March 17, 2022 10:53 AM
    Hello,

    I want to create a multiselect filed for use it inside a playbook for choose options (for instance for send email templates).
    I can do it trough Rule + Layout + Workflow and it works great if I call it like rule.properties.multiselect_filed, but I need to do it inside a playbook. How I can do it?
    I tried to create a multiselect field into Layout tab, but it not works properly if I call it incident.properties.multiselect_filed. I think should be a call like playbook.properties.multiselect_filed, but where and how create this field.

    ------------------------------
    Alexey Fedorov
    ------------------------------


  • 2.  RE: Multiselect field for Playbook

    Posted Fri March 18, 2022 08:45 AM
    Currently Playbooks do not yet support input field from a form like a Rule does. This is actively being worked on and should be available shortly. Don't have an exact date.  When it is available it will be available like:

    playbook.inputs.multiselect_field

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: Multiselect field for Playbook

    Posted Fri March 18, 2022 09:49 AM
    Thank you for the answer. Do you know a version number when it will released?

    ------------------------------
    Alexey Fedorov
    ------------------------------