IBM QRadar SOAR: Working with Incident Properties with Playbooks: Revision history

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

16 June 2025

  • curprev 17:2617:26, 16 June 2025‎ Ebasso talk contribs‎ 1,115 bytes −2‎ No edit summary
  • curprev 17:2617:26, 16 June 2025‎ Ebasso talk contribs‎ 1,117 bytes +1,117‎ Created page with "Simple playbook to close a Incident == Configuring the Playbook == 372x600px In your playbook: 1) add or edit the '''Define Properties''' script. Provide the following code: <nowiki> x_var= {} x_var['value'] = 'Blablabla' my_vars = { "id": 4, "default_inc_type": "Phishing", "username": "John Connor" } playbook.addProperty('x_var', x_var) playbook.addProperty('my_vars', my_vars) </nowiki> 1) add or edit the '''Define Propertie..."
Retrieved from "https://ebasso.net/wiki/index.php?title=IBM_QRadar_SOAR:_Working_with_Incident_Properties_with_Playbooks"