I want to attach attachment in incident using playbook.

shreyash_412 — Mon, 30 Jan 2023 05:19:34 GMT

Hi Team, I have one use case I wanted to attach an attachment in an incident using the playbook. So I have one command which retrieves attachments of particular incidents. I have created one playbook which first retrieves the attachment of a particular incident and then in the second task I'm using setIncident command to update incidents with attachments, but It is not working.

In Context data, there is a File object but I'm not able to set it in a particular incident using setIncident command. Below I attached a screenshot of setIncident task.

Re: I want to attach attachment in incident using playbook.

jfernandes1 — Fri, 10 Feb 2023 02:25:26 GMT

Hi @shreyash_412, Not sure I understand you case entirely. I have provided a solution for both my assumptions.

If you have data stored in the context and are trying to save that to the context as a file. You can try the !FileCreateAndUploadV2 filename="textfile.txt" data_encoding=raw data=${ContextKeyWhereDataIsStored} command. The result of the automation creates a file inside the context.

If you are trying the move a file from the "File" context key to the "incident.attachments "key. Then try below command. The automation is deprecated but can still work. !DemistoUploadFileV2 entryID=406@0ede5a91-b496-4414-87be-80c42d1486d4 incidentID=${incident.id} target="incident attachment". Note that a duplicate file will be created in the File key.

topic Re: I want to attach attachment in incident using playbook. in Cortex XSOAR Discussions

I want to attach attachment in incident using playbook.

Re: I want to attach attachment in incident using playbook.