IBM Security QRadar SOAR

 View Only
  • 1.  Close incident with script

    Posted Wed April 20, 2022 12:52 PM
    Is there a simple way to close an incident with a script? Alternatively any apps in app exchange that has this functionality?

    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Close incident with script

    Posted Fri April 22, 2022 08:53 AM
    Hi Mark,

    I'm happy to say that, yes, we have that capability in an app: Incident Utils https://exchange.xforce.ibmcloud.com/hub/extension/52b73a41ea7ae93071f19c7e00f72be5. See the function for closing an incident. It does require a template to be used for setting the required fields for your environment. But the default template can be used as a guide for the standard required fields: Resolution and Resolution Summary.

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------