IBM Security QRadar SOAR

 View Only

  • 1.  Add datatable to html email fn_outbound_email

    Posted Fri September 09, 2022 11:19 AM
    Hello Everyone

    I would like to include Datatables in the emails sent by the SOAR. However I couldn't figure out how to do it.

    I noticed that there is a get_datatable function included in the template_helper.py however I am having a hard time finding a way to include it.

    I was doing some tests and i keep having the same error

    2022-09-09 13:48:46,217 INFO [template_helper] get_datatable: (qradar_offense_event) ()
    2022-09-09 13:48:46,251 ERROR [template_helper] the datatable qradar_offense_event doesn't exist

    Does anybody know how to proceed with the configuration of the script?

    Thank you very much in advance.

    ------------------------------
    Arben Alia
    ------------------------------


  • 2.  RE: Add datatable to html email fn_outbound_email

    Posted Fri September 09, 2022 09:39 PM
    You should use 2 functions in a workflow: get rows from data table helper function and then, parsing the results, add it to outbound email function

    ------------------------------
    Ngoc Dai
    ------------------------------

    Original Message


  • 3.  RE: Add datatable to html email fn_outbound_email

    Posted Sat September 10, 2022 05:37 AM
    Hi Ngoc,

    Thank you for the response. Since I am quite new to this, may I ask you if you could give me some examples of how to configure the first function and how to pass the result?

    Thanks

    ------------------------------
    Arben Alia
    ------------------------------

    Original Message


  • 4.  RE: Add datatable to html email fn_outbound_email

    Posted Sun September 11, 2022 04:33 AM
    On the first function, you will need to use the output. For example, call the result of first function is get_rows_result.
    And on the second function, you call the result by using workflow.properties.get_rows_result. Depends on what information you need, you will have to parsing the result and add it to data table in html format.

    ------------------------------
    Ngoc Dai
    ------------------------------

    Original Message


  • 5.  RE: Add datatable to html email fn_outbound_email

    Posted Mon September 12, 2022 08:07 AM
    Hi Arden,

    We will be publishing this capability in a new release of fn_outbound_email. It will include a datatable to maintain the email conversations within an incident. I expect it to be published within this week (Sept. 12).

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------

    Original Message