IBM QRadar SOAR: Add a formated Note

From Wiki
Revision as of 22:01, 6 July 2025 by Ebasso (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
results = playbook.functions.results.rest_response
res = results.content.json

if results.success:
  note = """
  <h5> Information from XYZ</h5>
  
  ✅ Sucess on request to XYZ  {res_id}
  
  XYZ Link: <a href="{res_link}">{res_link}</a>
  Status: {res_status}

  Severity: {res_severity}
  """.format(
    res_id = res["id"],
    res_link = res["oneLink"],
    res_status = res["status"],
    res_severity = res["severity"]
    )
else:
  note = "❌ An Error happens. Try later."

incident.addNote(helper.createRichText(note))


Ver também