IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Resilient SOAR auto Reporting

    Posted Mon February 28, 2022 11:27 PM
    Hi All,

    We want to configure daily/weekly/monthly auto reporting of our SOAR incidents. The plan is to generate a report from SOAR and send it to respective audiences automatically. 

    Could you please suggest how to achieve that, any leads would be greatly appreciated.

    ------------------------------
    Fms SOC
    ------------------------------


  • 2.  RE: Resilient SOAR auto Reporting

    Posted Wed March 02, 2022 09:05 AM
    Hello, i was able to achieve a daily report by using de Resilient API rest and python, requesting indicent information using the query incident endpoint.

    I hope it helps.

    regards,


    ------------------------------
    Guillermo Lujan
    ------------------------------



  • 3.  RE: Resilient SOAR auto Reporting

    Posted Wed March 02, 2022 10:52 AM
    Hello 

    Can you please share the information how you did that?

    ------------------------------
    Fawad Majid
    ------------------------------