IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

IBM SOAR inbound email - attach original email to the incident

  • 1.  IBM SOAR inbound email - attach original email to the incident

    Posted Wed March 30, 2022 10:37 AM

    Hi Community,

     

    Is that possible to preserve the original email as an incident attachment when the SOAR creates the new incident with the inbound email capability? If yes, please share how to do this.

     

    Thanks, Csaba

     

     



  • 2.  RE: IBM SOAR inbound email - attach original email to the incident

    Posted Thu March 31, 2022 07:26 AM
    I'm pretty sure that the original email shows up on the Email tab of the incident:


    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message