Details
| ID | Cherwell |
|---|---|
| Provider | Ivanti |
| Category | Case Management |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM |
README
Cloud-based IT service management solution
This integration was integrated and tested with version 10.1.1 of Cherwell
Configure Cherwell in Cortex
| Parameter | Required |
|---|---|
| URL (example: https://my.domain.com) | True |
| Username | True |
| Password | True |
| Client id | True |
| Trust any certificate (not secure) | False |
| Use system proxy settings | False |
| First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days) | False |
| CSV list of objects to fetch. The default is incident, for example: incident,problem,service) | False |
| Max results to fetch (defualt is 30) | False |
| Advanced Query to fetch (see integration detailed instructions) | False |
| Fetch attachments (include attachements in fetch process) | False |
| Fetch incidents | False |
| Incident type | False |
Commands
You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
cherwell-create-business-object
Creates a business object.
Base Command
cherwell-create-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| json | Data JSON containing the relevant fields and their values, for example: {“title”: “some value”}). |
Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.BusinessObjects.RecordId | String | Business object record ID. |
| Cherwell.BusinessObjects.PublicId | String | Business object public ID. |
Command Example
!cherwell-create-business-object type=incident json={"Priority": "3", "CustomerDisplayName": "demisto admin", "Description": "This incident was created by Cherwell test playbook","Service":"Enterprise Apps","Category":"PeopleSoft","Subcategory":"Submit Incident"}
Context Example
{
"Cherwell": {
"BusinessObjects": {
"PublicId": "102384",
"RecordId": "947571cec8a5b5f03850c940c2bf6ca2bf116ffce9"
}
}
}
Human Readable Output
New Incident was created
Public Id Record Id 102384 947571cec8a5b5f03850c940c2bf6ca2bf116ffce9
cherwell-update-business-object
Update a business object with the specified fields.
Base Command
cherwell-update-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| json | Data JSON containing the relevant fields and their values. | Required |
| id_value | Public ID or record ID. | Required |
| id_type | Type of ID. Possible values are: public_id, record_id. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.BusinessObjects.RecordId | String | Business object record ID. |
| Cherwell.BusinessObjects.PublicId | Unknown | Business object public ID. |
Command Example
!cherwell-update-business-object type=incident id_type=public_id id_value=102383 json={"Priority": "1"}
Context Example
{
"Cherwell": {
"BusinessObjects": {
"PublicId": "102383",
"RecordId": "94757184cce46253b3ab694ae58289b64d0cd867ce"
}
}
}
Human Readable Output
Incident 102383 was updated
Public Id Record Id 102383 94757184cce46253b3ab694ae58289b64d0cd867ce
cherwell-delete-business-object
Deletes a given business object.
Base Command
cherwell-delete-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_value | Public ID or record ID. | Required |
| id_type | Type of ID. Possible values are: public_id, record_id. | Required |
Context Output
There is no context output for this command.
Command Example
!cherwell-delete-business-object id_type=record_id id_value=94757184cce46253b3ab694ae58289b64d0cd867ce type=incident
Human Readable Output
Record 94757184cce46253b3ab694ae58289b64d0cd867ce of type incident was deleted
cherwell-get-business-object
Gets a business object by an ID.
Base Command
cherwell-get-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_value | Public ID or record ID. | Required |
| id_type | Type of ID. Possible values are: record_id, public_id. | Required |
Context Output
There is no context output for this command.
Command Example
!cherwell-get-business-object type=incident id_type=public_id id_value=102383
Context Example
{
"Cherwell": {
"BusinessObjects": {
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "False",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/22/2021 12:22 PM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook-\r\n-\r\nThis is from the REST API-\r\n-\r\nThis is from the REST API",
"DescriptionSentimentValue": "2",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.02",
"IncidentDurationInHours": "0.53",
"IncidentID": "102383",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "demisto admin",
"LastModByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"LastModTimeStamp": "",
"LastModifiedDateTime": "7/22/2021 12:53 PM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "3",
"PublicId": "102383",
"RecID": "94757184cce46253b3ab694ae58289b64d0cd867ce",
"RecordId": "94757184cce46253b3ab694ae58289b64d0cd867ce",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/26/2021 12:07 PM",
"SLAResolveByDeadline": "7/26/2021 12:22 PM",
"SLARespondByDeadline": "7/22/2021 4:22 PM",
"SLAResponseWarning": "7/22/2021 4:07 PM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "4",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "False",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "False",
"Stat_SLAResponseBreached": "False",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "False",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0",
"TotalTasks": "0",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
}
}
}
Human Readable Output
Incident: 102383
Approval Block ID Assigned Team Assigned Team ID Assigned To Assigned To ID Assigned To Manager Barcode Breach Notes CI Down End Date Time CI Down Start Date Time CI Downtime In Minutes Call Source Cart Item ID Category Cause Change ID Cloned Incident Cloned Incident ID Close Description Closed By Closed By ID Closed Date Time Closed On 1 St Call Combined KB Comments Config Item Display Name Config Item Rec ID Config Item Type Config Item Type ID Cost Created By Created By Email Created By ID Created Date Time Created During Customer Department Customer Display Name Customer Rec ID Customer Subscription Level Customer Type ID Default Team Description Description Sentiment Value Email Notifications ISMS Audits ID Impact In cident Duration In Days In cident Duration In Hours Incident ID Incident Type Incidentchild ID Incidentchild Rec ID Knowledge Article ID Last Mod By Last Mod By ID Last Mod Time Stamp Last Modified Date Time Level 2 Escalation Complete Level 2 Escalation Team Level 3 Escalation Complete Level 3 Escalation Team Linked Problem Linked SL As Linked To Problem Location Major Incident Major Incident ID Major Incident Rec ID Network Event ID Next Status Next Status One Step Next Status Text On Behalf Of Pending End Date Time Pending Previous Status Pending Reason Pending Start Date Time Picked Up Date Time Portal Affects Multiple Users Portal Affects Primary Function Portal Alt Contact Info Priority Public Id Rec ID Record Id Recurring Incident Reopened Requester Requester Department Requester Email Requester ID Review By Deadline SCT Fired SCT Rec ID SLAID SLAID For CI SLAID For Customer SLAID For Service SLA Name SLA Name For CI SLA Name For Customer SLA Name For Service SLA Resolution Warning SLA Resolve By Deadline SLA Respond By Deadline SLA Response Warning SLA Target Time ID SLA_ Key STC Time In Minutes Security Event ID Service Service Cart ID Service Catalog Template Name Service Customer Is Entitled Service Entitlements Service ID Show All Services Show Contact Information Skill ID Smart Classify Search String Specifics Type Id Stat _24 X 7 Elapsed Time Stat _ Date Time Assigned Stat _ Date Time Closed Stat _ Date Time In Progress Stat _ Date Time Re Opened Stat _ Date Time Resolved Stat _ Date Time Responded Stat _ First Call Resolution Stat _ Incident Escalated Stat _ Incident Reopened Stat _ Number Of Escalations Stat _ Number Of Touches Stat _ Response Time Stat _SLA Resolution Breached Stat _SLA Resolution Good Stat _SLA Resolution Warning Stat _SLA Response Breached Stat _SLA Response Good Stat _SLA Response Warning Status Status Desc Status ID Status Order Subcategory Subcategory ID Task Closed Count Tasks Closed Tasks In Progress Tasks On Hold Total STC Time In Minutes Total Task Time Total Tasks Urgency Wait Time Walk Up Support Location Was CI Down Withdraw 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 0 Phone PeopleSoft False False 0 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/22/2021 12:22 PM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook-
-
This is from the REST API-
-
This is from the REST API2 0.02 0.53 102383 Service Request demisto admin 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/22/2021 12:53 PM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 3 102383 94757184cce46253b3ab694ae58289b64d0cd867ce 94757184cce46253b3ab694ae58289b64d0cd867ce False False Accounting False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/26/2021 12:07 PM 7/26/2021 12:22 PM 7/22/2021 4:22 PM 7/22/2021 4:07 PM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 4 0 False False False False False False New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0 0 0 False False
cherwell-download-attachments
Downloads imported attachements from a specified business object.
Base Command
cherwell-download-attachments
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_type | Type of ID. Possible values are: public_id, record_id. | Required |
| id_value | Public ID or record ID. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| File | Unknown | File result entries. |
Command Example
!cherwell-download-attachments type=incident id_type=public_id id_value=102383
Context Example
{
"File": {
"EntryID": "13537@f0716e08-9825-481c-8938-8e0a91a20557",
"Extension": "jpg",
"Info": "image/jpeg",
"MD5": "4f12aef086cb181a9c6404bd28fe2a6f",
"Name": "60X80.jpg",
"SHA1": "df71c946e1a6c48e00a6376ebb2475f818c7f255",
"SHA256": "cb27126f168aa69740b87f581a1af467c1f12ceabf3ff9ee56f2c142b1b8a41e",
"SHA512": "70d3eab2ff2b64aa298e63b91809ca0ee76514c5895c145cd7f538baf58078dc3948bb263c5783647e9ab61fe20f32a4adb34f5d88c7a418a1a36a982c85e4b5",
"SSDeep": "98304:cHwUVx2eChpJLQEnnE0wsMtEgWilmMPhGxNXnFVfM+3:Iwax2xppnctTAMPhWxr5",
"Size": 4187889,
"Type": "JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, model=FC1102, software=Google, height=0, datetime=2020:06:13 23:02:58, orientation=upper-left, description=DCIM/101MEDIA/DJI_0284.JPG, width=0], baseline, precision 8, 2750x3667, frames 3"
}
}
Human Readable Output
cherwell-upload-attachment
Uploads an attachment to a specified business object.
Base Command
cherwell-upload-attachment
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_type | Type of ID. Possible values are: record_id, public_id. | Required |
| id_value | Public ID or record ID. | Required |
| file_entry_id | File entry ID. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.UploadedAttachments.AttachmentFileId | String | AttachmentFileId to use to get information about the attachment. attachment |
| Cherwell.UploadedAttachments.BusinessObjectType | String | Business object type, for example: “Incident”. |
| Cherwell.UploadedAttachments.PublicId | String | Public ID. |
| Cherwell.UploadedAttachments.RecordId | String | Record ID. |
Command Example
!cherwell-upload-attachment file_entry_id=13570@f0716e08-9825-481c-8938-8e0a91a20557 type=incident id_type=public_id id_value=102383
Context Example
{
"Cherwell": {
"UploadedAttachments": {
"AttachmentFileId": "947571fbce24025d9bee3b42d99e6eb4dd887100f4",
"BusinessObjectType": "incident",
"PublicId": "102383"
}
}
}
Human Readable Output
Attachment: 947571fbce24025d9bee3b42d99e6eb4dd887100f4, was successfully attached to incident 102383
cherwell-link-business-objects
Links business objects that are related.
Base Command
cherwell-link-business-objects
Input
| Argument Name | Description | Required |
|---|---|---|
| parent_type | Parent business object type name. | Required |
| parent_record_id | Parent business object record ID. | Required |
| child_type | Child business object type name. | Required |
| child_record_id | Child business object record ID. | Required |
| relationship_id | Relationship ID. | Required |
Context Output
There is no context output for this command.
Command Example
!cherwell-link-business-objects parent_type=incident child_type=task relationship_id=9369187528b417b4a17aaa4646b7f7a78b3c821be9 child_record_id=94757210152427ef6ff98741a9a1c01d9fbe80545d parent_record_id=94757184cce46253b3ab694ae58289b64d0cd867ce
Human Readable Output
Incident 94757184cce46253b3ab694ae58289b64d0cd867ce and Task 94757210152427ef6ff98741a9a1c01d9fbe80545d were linked
cherwell-unlink-business-objects
Unlinks business objects that are linked and related.
Base Command
cherwell-unlink-business-objects
Input
| Argument Name | Description | Required |
|---|---|---|
| parent_type | Parent business object type name. | Required |
| parent_record_id | Parent business object record ID. | Required |
| child_type | Child business object type name. | Required |
| child_record_id | Child business object record ID. | Required |
| relationship_id | Relationship ID. | Required |
Context Output
There is no context output for this command.
Command Example
!cherwell-unlink-business-objects parent_type=incident child_type=task relationship_id=9369187528b417b4a17aaa4646b7f7a78b3c821be9 child_record_id=94757210152427ef6ff98741a9a1c01d9fbe80545d parent_record_id=94757184cce46253b3ab694ae58289b64d0cd867ce
Human Readable Output
Incident 94757184cce46253b3ab694ae58289b64d0cd867ce and Task 94757210152427ef6ff98741a9a1c01d9fbe80545d were unlinked
cherwell-get-attachments-info
Gets information for business object attachments.
Base Command
cherwell-get-attachments-info
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_type | Type of ID. Possible values are: record_id, public_id. | Required |
| id_value | Public ID or record ID. | Required |
| attachment_type | Type of attachment. Possible values are: linked, imported, url. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.AttachmentsInfo.AttachmentFiledId | String | Attachment field ID. |
| Cherwell.AttachmentsInfo.FileName | String | File name. |
| Cherwell.AttachmentsInfo.AttachmentId | String | Attachment ID. |
| Cherwell.AttachmentsInfo.BusinessObjectType | String | Business object type, for example: “Incident”. |
| Cherwell.AttachmentsInfo.BusinessObjectPublicId | String | Business object public ID. |
| Cherwell.AttachmentsInfo.BusinessObjectRecordId | String | Business object record ID. |
Command Example
!cherwell-get-attachments-info attachment_type=imported type=incident id_type=public_id id_value=102383
Context Example
{
"Cherwell": {
"AttachmentsInfo": [
{
"AttachmentFiledId": "9475718f7de6f1508ca8704bd9b83d215763f567d1",
"AttachmentId": "9475718f7e153c3d751b5046b389eeba6df7d6d778",
"BusinessObjectPublicId": "102383",
"BusinessObjectType": "incident",
"FileName": "60X80.jpg"
}
]
}
}
Human Readable Output
Incident 102383 attachments
Attachment Filed Id Attachment Id Business Object Public Id Business Object Type File Name 9475718f7de6f1508ca8704bd9b83d215763f567d1 9475718f7e153c3d751b5046b389eeba6df7d6d778 102383 incident 60X80.jpg
cherwell-remove-attachment
Remove the attachment from the specified business object.
Base Command
cherwell-remove-attachment
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| id_type | Type of ID. Possible values are: record_id, public_id. | Required |
| id_value | Public ID or record ID. | Required |
| attachment_id | Attachment ID to reomve. | Required |
Context Output
There is no context output for this command.
Command Example
!cherwell-remove-attachment type=incident id_type=public_id id_value=102383 attachment_id=9475718f7e153c3d751b5046b389eeba6df7d6d778
Human Readable Output
Attachment: 9475718f7e153c3d751b5046b389eeba6df7d6d778, was successfully removed from incident 102383
cherwell-query-business-object
Runs advanced queries to search in a specified business object.
Base Command
cherwell-query-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| query | The query to run. A CSV list of filters such that each filter is of the form: [“field_name”,”operator”,”value”] and operator is one of: ‘eq’=equal, ‘gt’=grater-than, ‘lt’=less-than, ‘contains’, ‘startwith’. Special characters should be escaped. Example: [["CreatedDateTime":"gt":"4/10/2019 3:10:12 PM"]["Priority","eq","1"]]. NOTE: If multiple filters are received for the same field name, an ‘OR’ operation between the filters will be performed, if the field names are different an ‘AND’ operation will be performed. |
Required |
| max_results | Maximum number of results to pull. Default is 30. | Optional |
Context Output
There is no context output for this command.
Command Example
!cherwell-query-business-object type=incident query=[["Description","eq","This incident was created by Cherwell test playbook"]]
Context Example
{
"Cherwell": {
"QueryResults": [
{
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0.00",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0.00",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/21/2021 11:00:09 AM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook",
"DescriptionSentimentValue": "1",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.17",
"IncidentDurationInHours": "4.00",
"IncidentID": "102379",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "Cherwell Admin",
"LastModByID": "93546560c6334c3c105d17437c843b9557775b2e0c",
"LastModTimeStamp": "Byte[] Array",
"LastModifiedDateTime": "7/21/2021 3:00:15 PM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "3",
"PublicId": "102379",
"RecID": "947563943db20d178bf122451b8946535670196726",
"RecordId": "947563943db20d178bf122451b8946535670196726",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "1/1/1900 12:00:00 AM",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/23/2021 10:45:09 AM",
"SLAResolveByDeadline": "7/23/2021 11:00:09 AM",
"SLARespondByDeadline": "7/21/2021 3:00:09 PM",
"SLAResponseWarning": "7/21/2021 2:45:09 PM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "5",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "False",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "False",
"Stat_SLAResponseBreached": "True",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "True",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0.00",
"TotalTasks": "0.00",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
},
{
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0.00",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0.00",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/21/2021 11:01:52 AM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook",
"DescriptionSentimentValue": "1",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.17",
"IncidentDurationInHours": "4.00",
"IncidentID": "102380",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "Cherwell Admin",
"LastModByID": "93546560c6334c3c105d17437c843b9557775b2e0c",
"LastModTimeStamp": "Byte[] Array",
"LastModifiedDateTime": "7/21/2021 3:02:01 PM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "1",
"PublicId": "102380",
"RecID": "94756398453cbed47f9b19434e91e320b92cb47d3d",
"RecordId": "94756398453cbed47f9b19434e91e320b92cb47d3d",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "1/1/1900 12:00:00 AM",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/21/2021 2:56:52 PM",
"SLAResolveByDeadline": "7/21/2021 3:01:52 PM",
"SLARespondByDeadline": "7/21/2021 11:26:52 AM",
"SLAResponseWarning": "7/21/2021 11:11:52 AM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "11",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "True",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "True",
"Stat_SLAResponseBreached": "True",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "True",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0.00",
"TotalTasks": "0.00",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
},
{
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0.00",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0.00",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/21/2021 1:11:19 PM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook",
"DescriptionSentimentValue": "1",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.79",
"IncidentDurationInHours": "19.00",
"IncidentID": "102381",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "Cherwell Admin",
"LastModByID": "93546560c6334c3c105d17437c843b9557775b2e0c",
"LastModTimeStamp": "Byte[] Array",
"LastModifiedDateTime": "7/22/2021 8:11:20 AM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "3",
"PublicId": "102381",
"RecID": "947564c7add241eb40f5ff40f5a026147a9fc0d47d",
"RecordId": "947564c7add241eb40f5ff40f5a026147a9fc0d47d",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "1/1/1900 12:00:00 AM",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/23/2021 12:56:19 PM",
"SLAResolveByDeadline": "7/23/2021 1:11:19 PM",
"SLARespondByDeadline": "7/22/2021 8:11:19 AM",
"SLAResponseWarning": "7/21/2021 4:56:19 PM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "5",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "False",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "False",
"Stat_SLAResponseBreached": "True",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "True",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0.00",
"TotalTasks": "0.00",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
},
{
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0.00",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0.00",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/22/2021 12:22:27 PM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook",
"DescriptionSentimentValue": "1",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.00",
"IncidentDurationInHours": "0.00",
"IncidentID": "102382",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "demisto admin",
"LastModByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"LastModTimeStamp": "Byte[] Array",
"LastModifiedDateTime": "7/22/2021 12:22:31 PM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "3",
"PublicId": "102382",
"RecID": "947571842387f6d7df118546e29cac13df2afafebc",
"RecordId": "947571842387f6d7df118546e29cac13df2afafebc",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "1/1/1900 12:00:00 AM",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/26/2021 12:07:27 PM",
"SLAResolveByDeadline": "7/26/2021 12:22:27 PM",
"SLARespondByDeadline": "7/22/2021 4:22:27 PM",
"SLAResponseWarning": "7/22/2021 4:07:27 PM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "1",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "False",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "False",
"Stat_SLAResponseBreached": "False",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "False",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0.00",
"TotalTasks": "0.00",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
},
{
"ApprovalBlockID": "",
"AssignedTeam": "1st Level Support",
"AssignedTeamID": "9365b4e90592c81e3b7a024555a6c0094ba77e8773",
"AssignedTo": "",
"AssignedToID": "",
"AssignedToManager": "",
"Barcode": "",
"BreachNotes": "",
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"CIDownEndDateTime": "",
"CIDownStartDateTime": "",
"CIDowntimeInMinutes": "0.00",
"CallSource": "Phone",
"CartItemID": "",
"Category": "PeopleSoft",
"Cause": "",
"ChangeID": "",
"ClonedIncident": "",
"ClonedIncidentID": "",
"CloseDescription": "",
"ClosedBy": "",
"ClosedByID": "",
"ClosedDateTime": "",
"ClosedOn1stCall": "False",
"CombinedKB": "",
"Comments": "",
"ConfigItemDisplayName": "",
"ConfigItemRecID": "",
"ConfigItemType": "",
"ConfigItemTypeID": "",
"Cost": "0.00",
"CreatedBy": "demisto admin",
"CreatedByEmail": "user1@mail.com",
"CreatedByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"CreatedDateTime": "7/22/2021 12:54:18 PM",
"CreatedDuring": "8 to 5 Monday thru Friday",
"CustomerDepartment": "Accounting",
"CustomerDisplayName": "demisto admin",
"CustomerRecID": "9365da817530b0bfee892a48fb8815654c6071af03",
"CustomerSubscriptionLevel": "",
"CustomerTypeID": "",
"DefaultTeam": "1st Level Support",
"Description": "This incident was created by Cherwell test playbook",
"DescriptionSentimentValue": "1",
"EmailNotifications": "",
"ISMSAuditsID": "",
"Impact": "",
"IncidentDurationInDays": "0.00",
"IncidentDurationInHours": "0.00",
"IncidentID": "102384",
"IncidentType": "Service Request",
"IncidentchildID": "",
"IncidentchildRecID": "",
"KnowledgeArticleID": "",
"LastModBy": "demisto admin",
"LastModByID": "9365b511f78906c1fe83644c3fb33e9ec1466f7d90",
"LastModTimeStamp": "Byte[] Array",
"LastModifiedDateTime": "7/22/2021 12:54:18 PM",
"Level2EscalationComplete": "False",
"Level2EscalationTeam": "2nd Level Support",
"Level3EscalationComplete": "False",
"Level3EscalationTeam": "3rd Level Support",
"LinkedProblem": "",
"LinkedSLAs": "93838607346b42be7074af487d9171ea9f948b7204 , , ",
"LinkedToProblem": "False",
"Location": "",
"MajorIncident": "False",
"MajorIncidentID": "",
"MajorIncidentRecID": "",
"NetworkEventID": "",
"NextStatus": "In Progress",
"NextStatusOneStep": "ActionInfoDef ID=\"93d9abdb6242",
"NextStatusText": "Begin Work",
"OnBehalfOf": "False",
"PendingEndDateTime": "",
"PendingPreviousStatus": "",
"PendingReason": "",
"PendingStartDateTime": "",
"PickedUpDateTime": "",
"PortalAffectsMultipleUsers": "False",
"PortalAffectsPrimaryFunction": "False",
"PortalAltContactInfo": "",
"Priority": "3",
"PublicId": "102384",
"RecID": "947571cec8a5b5f03850c940c2bf6ca2bf116ffce9",
"RecordId": "947571cec8a5b5f03850c940c2bf6ca2bf116ffce9",
"RecurringIncident": "False",
"Reopened": "False",
"Requester": "",
"RequesterDepartment": "Accounting",
"RequesterEmail": "",
"RequesterID": "",
"ReviewByDeadline": "1/1/1900 12:00:00 AM",
"SCTFired": "False",
"SCTRecID": "",
"SLAID": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForCI": "",
"SLAIDForCustomer": "93838607346b42be7074af487d9171ea9f948b7204",
"SLAIDForService": "",
"SLAName": "Platinum",
"SLANameForCI": "",
"SLANameForCustomer": "Platinum",
"SLANameForService": "",
"SLAResolutionWarning": "7/26/2021 12:39:18 PM",
"SLAResolveByDeadline": "7/26/2021 12:54:18 PM",
"SLARespondByDeadline": "7/22/2021 4:54:18 PM",
"SLAResponseWarning": "7/22/2021 4:39:18 PM",
"SLATargetTimeID": "",
"SLA_Key": "Platinum_Service Request",
"STCTimeInMinutes": "0",
"SecurityEventID": "",
"Service": "Enterprise Apps",
"ServiceCartID": "",
"ServiceCatalogTemplateName": "",
"ServiceCustomerIsEntitled": "True",
"ServiceEntitlements": "Platinum, Gold, Silver, Corporate",
"ServiceID": "9389f689ed2a47e91de7954ecb8f2fe733af0ecb06",
"ShowAllServices": "False",
"ShowContactInformation": "False",
"SkillID": "9454f50880a42d63b93ce142d58fbbe97de1b3d672",
"SmartClassifySearchString": "Submit Incident",
"SpecificsTypeId": "9398862125defd58a8deea46fe88acc411a96e2b00",
"Stat_24x7ElapsedTime": "0",
"Stat_DateTimeAssigned": "",
"Stat_DateTimeClosed": "",
"Stat_DateTimeInProgress": "",
"Stat_DateTimeReOpened": "",
"Stat_DateTimeResolved": "",
"Stat_DateTimeResponded": "",
"Stat_FirstCallResolution": "False",
"Stat_IncidentEscalated": "False",
"Stat_IncidentReopened": "False",
"Stat_NumberOfEscalations": "0",
"Stat_NumberOfTouches": "1",
"Stat_ResponseTime": "0",
"Stat_SLAResolutionBreached": "False",
"Stat_SLAResolutionGood": "False",
"Stat_SLAResolutionWarning": "False",
"Stat_SLAResponseBreached": "False",
"Stat_SLAResponseGood": "False",
"Stat_SLAResponseWarning": "False",
"Status": "New",
"StatusDesc": "",
"StatusID": "938729d99cb110f2a6c3e5488ead246422a7cd115f",
"StatusOrder": "1",
"Subcategory": "Submit Incident",
"SubcategoryID": "",
"TaskClosedCount": "0",
"TasksClosed": "False",
"TasksInProgress": "False",
"TasksOnHold": "False",
"TotalSTCTimeInMinutes": "0",
"TotalTaskTime": "0.00",
"TotalTasks": "0.00",
"Urgency": "",
"WaitTime": "0",
"WalkUpSupportLocation": "",
"WasCIDown": "False",
"Withdraw": "False"
}
]
}
}
Human Readable Output
Query Results
Approval Block ID Assigned Team Assigned Team ID Assigned To Assigned To ID Assigned To Manager Barcode Breach Notes Business Object Id CI Down End Date Time CI Down Start Date Time CI Downtime In Minutes Call Source Cart Item ID Category Cause Change ID Cloned Incident Cloned Incident ID Close Description Closed By Closed By ID Closed Date Time Closed On 1 St Call Combined KB Comments Config Item Display Name Config Item Rec ID Config Item Type Config Item Type ID Cost Created By Created By Email Created By ID Created Date Time Created During Customer Department Customer Display Name Customer Rec ID Customer Subscription Level Customer Type ID Default Team Description Description Sentiment Value Email Notifications ISMS Audits ID Impact In cident Duration In Days In cident Duration In Hours Incident ID Incident Type Incidentchild ID Incidentchild Rec ID Knowledge Article ID Last Mod By Last Mod By ID Last Mod Time Stamp Last Modified Date Time Level 2 Escalation Complete Level 2 Escalation Team Level 3 Escalation Complete Level 3 Escalation Team Linked Problem Linked SL As Linked To Problem Location Major Incident Major Incident ID Major Incident Rec ID Network Event ID Next Status Next Status One Step Next Status Text On Behalf Of Pending End Date Time Pending Previous Status Pending Reason Pending Start Date Time Picked Up Date Time Portal Affects Multiple Users Portal Affects Primary Function Portal Alt Contact Info Priority Public Id Rec ID Record Id Recurring Incident Reopened Requester Requester Department Requester Email Requester ID Review By Deadline SCT Fired SCT Rec ID SLAID SLAID For CI SLAID For Customer SLAID For Service SLA Name SLA Name For CI SLA Name For Customer SLA Name For Service SLA Resolution Warning SLA Resolve By Deadline SLA Respond By Deadline SLA Response Warning SLA Target Time ID SLA_ Key STC Time In Minutes Security Event ID Service Service Cart ID Service Catalog Template Name Service Customer Is Entitled Service Entitlements Service ID Show All Services Show Contact Information Skill ID Smart Classify Search String Specifics Type Id Stat _24 X 7 Elapsed Time Stat _ Date Time Assigned Stat _ Date Time Closed Stat _ Date Time In Progress Stat _ Date Time Re Opened Stat _ Date Time Resolved Stat _ Date Time Responded Stat _ First Call Resolution Stat _ Incident Escalated Stat _ Incident Reopened Stat _ Number Of Escalations Stat _ Number Of Touches Stat _ Response Time Stat _SLA Resolution Breached Stat _SLA Resolution Good Stat _SLA Resolution Warning Stat _SLA Response Breached Stat _SLA Response Good Stat _SLA Response Warning Status Status Desc Status ID Status Order Subcategory Subcategory ID Task Closed Count Tasks Closed Tasks In Progress Tasks On Hold Total STC Time In Minutes Total Task Time Total Tasks Urgency Wait Time Walk Up Support Location Was CI Down Withdraw 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 6dd53665c0c24cab86870a21cf6434ae 0.00 Phone PeopleSoft False 0.00 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/21/2021 11:00:09 AM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook 1 0.17 4.00 102379 Service Request Cherwell Admin 93546560c6334c3c105d17437c843b9557775b2e0c Byte[] Array 7/21/2021 3:00:15 PM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 3 102379 947563943db20d178bf122451b8946535670196726 947563943db20d178bf122451b8946535670196726 False False Accounting 1/1/1900 12:00:00 AM False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/23/2021 10:45:09 AM 7/23/2021 11:00:09 AM 7/21/2021 3:00:09 PM 7/21/2021 2:45:09 PM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 5 0 False False False True False True New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0.00 0.00 0 False False 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 6dd53665c0c24cab86870a21cf6434ae 0.00 Phone PeopleSoft False 0.00 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/21/2021 11:01:52 AM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook 1 0.17 4.00 102380 Service Request Cherwell Admin 93546560c6334c3c105d17437c843b9557775b2e0c Byte[] Array 7/21/2021 3:02:01 PM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 1 102380 94756398453cbed47f9b19434e91e320b92cb47d3d 94756398453cbed47f9b19434e91e320b92cb47d3d False False Accounting 1/1/1900 12:00:00 AM False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/21/2021 2:56:52 PM 7/21/2021 3:01:52 PM 7/21/2021 11:26:52 AM 7/21/2021 11:11:52 AM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 11 0 True False True True False True New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0.00 0.00 0 False False 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 6dd53665c0c24cab86870a21cf6434ae 0.00 Phone PeopleSoft False 0.00 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/21/2021 1:11:19 PM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook 1 0.79 19.00 102381 Service Request Cherwell Admin 93546560c6334c3c105d17437c843b9557775b2e0c Byte[] Array 7/22/2021 8:11:20 AM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 3 102381 947564c7add241eb40f5ff40f5a026147a9fc0d47d 947564c7add241eb40f5ff40f5a026147a9fc0d47d False False Accounting 1/1/1900 12:00:00 AM False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/23/2021 12:56:19 PM 7/23/2021 1:11:19 PM 7/22/2021 8:11:19 AM 7/21/2021 4:56:19 PM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 5 0 False False False True False True New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0.00 0.00 0 False False 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 6dd53665c0c24cab86870a21cf6434ae 0.00 Phone PeopleSoft False 0.00 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/22/2021 12:22:27 PM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook 1 0.00 0.00 102382 Service Request demisto admin 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 Byte[] Array 7/22/2021 12:22:31 PM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 3 102382 947571842387f6d7df118546e29cac13df2afafebc 947571842387f6d7df118546e29cac13df2afafebc False False Accounting 1/1/1900 12:00:00 AM False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/26/2021 12:07:27 PM 7/26/2021 12:22:27 PM 7/22/2021 4:22:27 PM 7/22/2021 4:07:27 PM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 1 0 False False False False False False New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0.00 0.00 0 False False 1st Level Support 9365b4e90592c81e3b7a024555a6c0094ba77e8773 6dd53665c0c24cab86870a21cf6434ae 0.00 Phone PeopleSoft False 0.00 demisto admin user1@mail.com 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 7/22/2021 12:54:18 PM 8 to 5 Monday thru Friday Accounting demisto admin 9365da817530b0bfee892a48fb8815654c6071af03 1st Level Support This incident was created by Cherwell test playbook 1 0.00 0.00 102384 Service Request demisto admin 9365b511f78906c1fe83644c3fb33e9ec1466f7d90 Byte[] Array 7/22/2021 12:54:18 PM False 2nd Level Support False 3rd Level Support 93838607346b42be7074af487d9171ea9f948b7204 , , False False In Progress ActionInfoDef ID=”93d9abdb6242 Begin Work False False False 3 102384 947571cec8a5b5f03850c940c2bf6ca2bf116ffce9 947571cec8a5b5f03850c940c2bf6ca2bf116ffce9 False False Accounting 1/1/1900 12:00:00 AM False 93838607346b42be7074af487d9171ea9f948b7204 93838607346b42be7074af487d9171ea9f948b7204 Platinum Platinum 7/26/2021 12:39:18 PM 7/26/2021 12:54:18 PM 7/22/2021 4:54:18 PM 7/22/2021 4:39:18 PM Platinum_Service Request 0 Enterprise Apps True Platinum, Gold, Silver, Corporate 9389f689ed2a47e91de7954ecb8f2fe733af0ecb06 False False 9454f50880a42d63b93ce142d58fbbe97de1b3d672 Submit Incident 9398862125defd58a8deea46fe88acc411a96e2b00 0 False False False 0 1 0 False False False False False False New 938729d99cb110f2a6c3e5488ead246422a7cd115f 1 Submit Incident 0 False False False 0 0.00 0.00 0 False False
cherwell-get-field-info
Gets information for a field, by one of its properties (Name, Display Name, or id).
Base Command
cherwell-get-field-info
Input
| Argument Name | Description | Required |
|---|---|---|
| type | Business object type, for example: “Incident”. . | Required |
| field_property | Field property to search by (Name, DIsplay Name or Field id). | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.FieldInfo.DisplayName | String | Field display name (as it displays in the Cherwell UI). |
| Cherwell.FieldInfo.FieldId | String | Field ID. |
| Cherwell.FieldInfo.Name | String | The name to use when working with business object commands. |
Command Example
!cherwell-get-field-info type=incident field_property=Customer Display Name
Context Example
{
"Cherwell": {
"FieldInfo": {
"DisplayName": "Customer Display Name",
"FieldId": "93734aaff77b19d1fcfd1d4b4aba1b0af895f25788",
"Name": "CustomerDisplayName"
}
}
}
Human Readable Output
Field info
Display Name Field Id Name Customer Display Name 93734aaff77b19d1fcfd1d4b4aba1b0af895f25788 CustomerDisplayName
cherwell-run-saved-search
Returns the results of a saved search.
Base Command
cherwell-run-saved-search
Input
| Argument Name | Description | Required |
|---|---|---|
| association_id | Business object association ID for the saved search. | Required |
| scope | Scope name or ID for the saved search. | Required |
| scope_owner | Scope owner ID for the saved search. Use “(None)” when no scope owner exists. | Required |
| search_name | Name of the saved search. | Required |
Context Output
There is no context output for this command.
Command Example
#### Human Readable Output
### cherwell-get-business-object-id
***
Get a general business object id by name
#### Base Command
`cherwell-get-business-object-id`
#### Input
| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| business_object_name | Business object name. | Required |
#### Context Output
| **Path** | **Type** | **Description** |
| --- | --- | --- |
| Cherwell.BusinessObjectInfo.BusinessObjectId | String | Business object ID. |
| Cherwell.BusinessObjectInfo.BusinessObjectName | String | Business object name. |
#### Command Example
```!cherwell-get-business-object-id business_object_name=incident```
#### Context Example
```json
{
"Cherwell": {
"BusinessObjectInfo": {
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae",
"BusinessObjectName": "incident"
}
}
}
Human Readable Output
Business Object Info
Business Object Id Business Object Name 6dd53665c0c24cab86870a21cf6434ae incident
cherwell-get-business-object-summary
Get business object summary by name or ID.
Base Command
cherwell-get-business-object-summary
Input
| Argument Name | Description | Required |
|---|---|---|
| name | The name of the business object. | Optional |
| id | The ID of the business object. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.BusinessObjectSummary.supporting | Boolean | Whether the business object is a supporting business object or not. |
| Cherwell.BusinessObjectSummary.major | Boolean | Whether the business object is a major business object or not. |
| Cherwell.BusinessObjectSummary.group | Boolean | Whether the business object is a group business object or not. |
| Cherwell.BusinessObjectSummary.name | String | The name of the business object. |
| Cherwell.BusinessObjectSummary.stateFieldId | String | The ID of the business object state field. |
| Cherwell.BusinessObjectSummary.busObId | String | The ID of the business object. |
| Cherwell.BusinessObjectSummary.states | String | The valid states of the business object. |
| Cherwell.BusinessObjectSummary.lookup | Boolean | Whether the object is a lookup object or not. |
| Cherwell.BusinessObjectSummary.displayName | String | The display name of the business object. |
| Cherwell.BusinessObjectSummary.firstRecIdField | String | The ID value of the first business object record ID (RecID) field. |
| Cherwell.BusinessObjectSummary.recIdFields | String | The IDs of business object record ID (RecID) fields. |
Command Example
!cherwell-get-business-object-summary name=task
Context Example
{
"Cherwell": {
"BusinessObjectSummary": {
"busObId": "9446978f53c84aef2835904a7ab96cfc882efe030c",
"displayName": "Task",
"firstRecIdField": "9355d5ed41677b1e9c897e4fa9b4065d34319187f0",
"group": true,
"groupSummaries": [
{
"busObId": "9355d5ed41e384ff345b014b6cb1c6e748594aea5b",
"displayName": "Work Item",
"firstRecIdField": "9355d5ed41677b1e9c897e4fa9b4065d34319187f0",
"group": false,
"groupSummaries": [],
"lookup": false,
"major": false,
"name": "Work_Item",
"recIdFields": "9355d5ed41677b1e9c897e4fa9b4065d34319187f0",
"stateFieldId": "9368f0fb7b744108a666984c21afc932562eb7dc16",
"states": "New,In Progress,Closed,Acknowledged",
"supporting": true
}
],
"lookup": false,
"major": false,
"name": "Task",
"recIdFields": "9355d5ed41677b1e9c897e4fa9b4065d34319187f0",
"stateFieldId": "9368f0fb7b744108a666984c21afc932562eb7dc16",
"states": "New,In Progress,Closed,Acknowledged",
"supporting": false
}
}
}
Human Readable Output
Business Object Summary
Bus Ob Id Display Name First Rec Id Field Group Group Summaries Lookup Major Name Rec Id Fields State Field Id States Supporting 9446978f53c84aef2835904a7ab96cfc882efe030c Task 9355d5ed41677b1e9c897e4fa9b4065d34319187f0 true {‘firstRecIdField’: ‘9355d5ed41677b1e9c897e4fa9b4065d34319187f0’, ‘groupSummaries’: [], ‘recIdFields’: ‘9355d5ed41677b1e9c897e4fa9b4065d34319187f0’, ‘stateFieldId’: ‘9368f0fb7b744108a666984c21afc932562eb7dc16’, ‘states’: ‘New,In Progress,Closed,Acknowledged’, ‘busObId’: ‘9355d5ed41e384ff345b014b6cb1c6e748594aea5b’, ‘displayName’: ‘Work Item’, ‘group’: False, ‘lookup’: False, ‘major’: False, ‘name’: ‘Work_Item’, ‘supporting’: True} false false Task 9355d5ed41677b1e9c897e4fa9b4065d34319187f0 9368f0fb7b744108a666984c21afc932562eb7dc16 New,In Progress,Closed,Acknowledged false
cherwell-get-one-step-actions-for-business-object
Get One-Step Actions by business object ID.
Base Command
cherwell-get-one-step-actions-for-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| busobjectid | The ID of the business object. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| Cherwell.OneStepActions.BusinessObjectId | String | The ID of the business object. |
| Cherwell.OneStepActions.Actions | Unknown | The business object actions. |
Command Example
!cherwell-get-one-step-actions-for-business-object busobjectid=6dd53665c0c24cab86870a21cf6434ae
Context Example
{
"Cherwell": {
"OneStepActions": {
"Actions": {
"Buttons": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Launches Skype to contact the Customer.",
"displayName": "Call Contact",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._48x48.mobilephone3.png",
"id": "9389e70ed88b73a6b1393948a0951e25993cff6c66",
"links": [],
"localizedScopeName": "Global",
"name": "Call Contact",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9389e70ed88b73a6b1393948a0951e25993cff6c66#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Abandons the incident and opens the default dashboard",
"displayName": "Cancel Incident",
"galleryImage": "",
"id": "944414556cbeebd3bf521840bdad54264072e6e430",
"links": [],
"localizedScopeName": "Global",
"name": "Cancel Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:944414556cbeebd3bf521840bdad54264072e6e430#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Task with a Status of In-Progress and prompts the user for a Title, Description and Time Spent. Used primarily in iCherwell",
"displayName": "Create a Task with Time Spent",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.alarmclock.png",
"id": "93dfb3fc4f3339c24f199d4eed888d50a2da3e2908",
"links": [],
"localizedScopeName": "Global",
"name": "Crear una tarea con el tiempo dedicado",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dfb3fc4f3339c24f199d4eed888d50a2da3e2908#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Create and Send Survey",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.SubReport.ico",
"id": "943a2f7631f172ade8507347a5ada7b2a39daec900",
"links": [],
"localizedScopeName": "Global",
"name": "Create and Send Survey",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:943a2f7631f172ade8507347a5ada7b2a39daec900#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Changes the Incident Status to Pending and creates a Change Request Record from the current Incident. Prompts User to select a reason and enter a short title for the Change, and links the Change Request to the Incident.",
"displayName": "Create Change from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.BusObEditor-Lifecycle.png",
"id": "9378b5149c22e1173219ac42a699f88b881885bc11",
"links": [],
"localizedScopeName": "Global",
"name": "Create Change from Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9378b5149c22e1173219ac42a699f88b881885bc11#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Problem Record from the Incident. Adds the Problem to the Problem Management Queue.",
"displayName": "Create Problem from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.trafficlight_on.ico",
"id": "935ecc5e96f6f2e26994e445dd8be9fef86252399e",
"links": [],
"localizedScopeName": "Global",
"name": "Cria um problema de um incidente",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:935ecc5e96f6f2e26994e445dd8be9fef86252399e#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Change Request Record from the current Incident.",
"displayName": "Create Standard Change from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.BusObEditor-Lifecycle.png",
"id": "93e2938fd4d656b25516ba41b986365596101e39a5",
"links": [],
"localizedScopeName": "Global",
"name": "Create Standard Change from Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93e2938fd4d656b25516ba41b986365596101e39a5#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Conditional expression One-Step that shows a Configuration Map",
"displayName": "Impacted CI's Button Actions",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.WidgetEditor_ScatterChart.png",
"id": "93dfe7325dd236465ec873418e97ca948f738974a0",
"links": [],
"localizedScopeName": "Global",
"name": "Impacted CIs Button Actions",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dfe7325dd236465ec873418e97ca948f738974a0#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a new Knowledge Article (KA) populated with the Categorization, Description and Solution/Workaround from the Incident.",
"displayName": "Nominate for KB",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Knowledge.KnowledgeViewCurrent.png",
"id": "9365abfe787a1bce3282c446a9ae9914204703a7fe",
"links": [],
"localizedScopeName": "Global",
"name": "Nominate for KB",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9365abfe787a1bce3282c446a9ae9914204703a7fe#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Task time tracking entry and prompts the User for time spent and task completion details. Sets the Task Close Code to Completed.",
"displayName": "Track Task Time Against Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.alarmclock.png",
"id": "93d4ee5220e714428a9a4f4189a329409e69e48056",
"links": [],
"localizedScopeName": "Global",
"name": "Marcar tempo da tarefa contra o incidente",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d4ee5220e714428a9a4f4189a329409e69e48056#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
],
"Config Item Tasks": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Pings the Primary CI (specified on the Incident Form) using the IP Address provided in the CI details.",
"displayName": "Ping System",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.workstation_network.ico",
"id": "9379e37ed996514927afa143658d9d46c06b3f1558",
"links": [],
"localizedScopeName": "Global",
"name": "Ping System",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9379e37ed996514927afa143658d9d46c06b3f1558#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Launches Remote Desktop Connection (MSTSC.exe) to the selected CI. Assumes the current User has rights to use remote desktop and remote connections are configured on the target CI.",
"displayName": "RDP to Primary CI",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._48x48.workstation_network.png",
"id": "939850e292d4b54454e9d8471db023c97db04ec279",
"links": [],
"localizedScopeName": "Global",
"name": "RDP to Primary CI",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:939850e292d4b54454e9d8471db023c97db04ec279#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Reboots the Primary CI (specified on the Incident Form), and then updates the Close Description field to track that the CI was rebooted.",
"displayName": "Reboot Computer",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Views.workplace2.png",
"id": "936592312d5676ab8accd94673a45ceaa41777e31e",
"links": [],
"localizedScopeName": "Global",
"name": "Reboot Computer",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:936592312d5676ab8accd94673a45ceaa41777e31e#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Sets password for selected User or Customer to \"ChangeMe,\" and sets account to active if locked out. Updates Incident Form to indicate that password was reset and changes Status to Resolved.",
"displayName": "Reset Password",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.workstation_network.ico",
"id": "935467d76aacbb0fe7317345f58cc75e38c6640e38",
"links": [],
"localizedScopeName": "Global",
"name": "Reset Password",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:935467d76aacbb0fe7317345f58cc75e38c6640e38#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
],
"Global": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Launches Remote Desktop Connection (MSTSC.exe) to the selected CI. Assumes the current User has rights to use remote desktop and remote connections are configured on the target CI.",
"displayName": "RDP to Primary CI",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._48x48.workstation_network.png",
"id": "939850e292d4b54454e9d8471db023c97db04ec279",
"links": [],
"localizedScopeName": "Global",
"name": "RDP to Primary CI",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:939850e292d4b54454e9d8471db023c97db04ec279#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Pings the Primary CI (specified on the Incident Form) using the IP Address provided in the CI details.",
"displayName": "Ping System",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.workstation_network.ico",
"id": "9379e37ed996514927afa143658d9d46c06b3f1558",
"links": [],
"localizedScopeName": "Global",
"name": "Ping System",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9379e37ed996514927afa143658d9d46c06b3f1558#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Reboots the Primary CI (specified on the Incident Form), and then updates the Close Description field to track that the CI was rebooted.",
"displayName": "Reboot Computer",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Views.workplace2.png",
"id": "936592312d5676ab8accd94673a45ceaa41777e31e",
"links": [],
"localizedScopeName": "Global",
"name": "Reboot Computer",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:936592312d5676ab8accd94673a45ceaa41777e31e#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Clones information from the current Incident into a new Incident Record. Populates the Description, Call Source, Categorization, and Priority fields with information from the cloned record.",
"displayName": "Clone Current Incident",
"galleryImage": "",
"id": "9389f945cc0784caad651a491db626b6baf78bb19c",
"links": [],
"localizedScopeName": "Global",
"name": "Clone Current Incident",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9389f945cc0784caad651a491db626b6baf78bb19c#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Displays a popup message if the individual selected as the Incident Owner is out of the office (as defined in the UserInfo Time-off dates).",
"displayName": "Not Available",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.about.png",
"id": "93b2c31172b273237c7311487b9c6eace6fcdef071",
"links": [],
"localizedScopeName": "Global",
"name": "Not Available",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93b2c31172b273237c7311487b9c6eace6fcdef071#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Launches Skype to contact the Customer.",
"displayName": "Call Contact",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._48x48.mobilephone3.png",
"id": "9389e70ed88b73a6b1393948a0951e25993cff6c66",
"links": [],
"localizedScopeName": "Global",
"name": "Call Contact",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9389e70ed88b73a6b1393948a0951e25993cff6c66#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Changes the Incident Status to Pending and creates a Change Request Record from the current Incident. Prompts User to select a reason and enter a short title for the Change, and links the Change Request to the Incident.",
"displayName": "Create Change from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.BusObEditor-Lifecycle.png",
"id": "9378b5149c22e1173219ac42a699f88b881885bc11",
"links": [],
"localizedScopeName": "Global",
"name": "Create Change from Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9378b5149c22e1173219ac42a699f88b881885bc11#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates and sends an e-mail to a Customer that her request for a new employee computer is denied. Attaches the e-mail to the Incident History Record.",
"displayName": "New Employee Request Denied",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "93d5744310efa377c99eac4cd6a029e203095cfdf6",
"links": [],
"localizedScopeName": "Global",
"name": "New Employee Request Denied",
"parentFolder": "9386dfe9a8b61715d6adac4b2eaf97ea07f8c59026",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d5744310efa377c99eac4cd6a029e203095cfdf6#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Create a new Journal - Note entry for Incident. Used primarily in iCherwell.",
"displayName": "Create a Journal Note Entry for Incident",
"galleryImage": "",
"id": "93dfb39503a41fb67670734ef495fd0c34216726de",
"links": [],
"localizedScopeName": "Global",
"name": "Create a Journal Note Entry for Incident",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dfb39503a41fb67670734ef495fd0c34216726de#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Task with a Status of In-Progress and prompts the user for a Title, Description and Time Spent. Used primarily in iCherwell",
"displayName": "Create a Task with Time Spent",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.alarmclock.png",
"id": "93dfb3fc4f3339c24f199d4eed888d50a2da3e2908",
"links": [],
"localizedScopeName": "Global",
"name": "Crear una tarea con el tiempo dedicado",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dfb3fc4f3339c24f199d4eed888d50a2da3e2908#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates Tasks for new employee items and adds request to New Request Queue.",
"displayName": "New Employee Tasks",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.woman1.ico",
"id": "93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b",
"links": [],
"localizedScopeName": "Global",
"name": "New Employee Tasks",
"parentFolder": "9386dfe9a8b61715d6adac4b2eaf97ea07f8c59026",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Change Request Record from the current Incident.",
"displayName": "Create Standard Change from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.BusObEditor-Lifecycle.png",
"id": "93e2938fd4d656b25516ba41b986365596101e39a5",
"links": [],
"localizedScopeName": "Global",
"name": "Create Standard Change from Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93e2938fd4d656b25516ba41b986365596101e39a5#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Changes the Incident Status from Resolved to Reopened, and clears the resolution fields that are used with the Email Monitor. Sets the Resolved Time in minutes and the Total STC Time in minutes to restart the SLA Clock.",
"displayName": "Reopen Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Unlock32.png",
"id": "93c28182ecc977b3dab73446549d977a008cd84ad2",
"links": [],
"localizedScopeName": "Global",
"name": "Reopen Incident",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93c28182ecc977b3dab73446549d977a008cd84ad2#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Sets password for selected User or Customer to \"ChangeMe,\" and sets account to active if locked out. Updates Incident Form to indicate that password was reset and changes Status to Resolved.",
"displayName": "Reset Password",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.workstation_network.ico",
"id": "935467d76aacbb0fe7317345f58cc75e38c6640e38",
"links": [],
"localizedScopeName": "Global",
"name": "Reset Password",
"parentFolder": "9386dfed35b006a71b4e6c42d2b6b2fe8c0a16fea5",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:935467d76aacbb0fe7317345f58cc75e38c6640e38#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Task time tracking entry and prompts the User for time spent and task completion details. Sets the Task Close Code to Completed.",
"displayName": "Track Task Time Against Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.alarmclock.png",
"id": "93d4ee5220e714428a9a4f4189a329409e69e48056",
"links": [],
"localizedScopeName": "Global",
"name": "Marcar tempo da tarefa contra o incidente",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d4ee5220e714428a9a4f4189a329409e69e48056#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Sets the Incident Status to Resolved. Used for Mobile Apps.",
"displayName": "Set Incident Status to Resolved",
"galleryImage": "",
"id": "93dcaa69fd0dee94e4f1f24cb6b86395bfb5cdbe77",
"links": [],
"localizedScopeName": "Global",
"name": "Set Incident Status to Resolved",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dcaa69fd0dee94e4f1f24cb6b86395bfb5cdbe77#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Conditional expression One-Step that shows a Configuration Map",
"displayName": "Impacted CI's Button Actions",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Editors.WidgetEditor_ScatterChart.png",
"id": "93dfe7325dd236465ec873418e97ca948f738974a0",
"links": [],
"localizedScopeName": "Global",
"name": "Impacted CIs Button Actions",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dfe7325dd236465ec873418e97ca948f738974a0#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Closes an Incident Record as a duplicate of another Incident. Prompts the User to enter the number (RecID) of the Incident that it duplicates.",
"displayName": "Close as Duplicate",
"galleryImage": "",
"id": "938737bddabf85fd0c881a4c26b93982d9411e91ef",
"links": [],
"localizedScopeName": "Global",
"name": "Close as Duplicate",
"parentFolder": "9386dfe936b88eacef32394c0c8a148924c6a10eca",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:938737bddabf85fd0c881a4c26b93982d9411e91ef#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Close Request",
"galleryImage": "",
"id": "93c281891b5c3819fe72934f6da3ca31efa03f7023",
"links": [],
"localizedScopeName": "Global",
"name": "Close Request",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93c281891b5c3819fe72934f6da3ca31efa03f7023#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Sets the Incident Priority to 1. Used for iCherwell and Android Mobile Apps.",
"displayName": "Set Incident to Priority One",
"galleryImage": "",
"id": "93dcaa73f25bd4c232c8b94ca1b29a0a63b5d4ee4b",
"links": [],
"localizedScopeName": "Global",
"name": "Set Incident to Priority One",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dcaa73f25bd4c232c8b94ca1b29a0a63b5d4ee4b#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a new Knowledge Article (KA) populated with the Categorization, Description and Solution/Workaround from the Incident.",
"displayName": "Nominate for KB",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Knowledge.KnowledgeViewCurrent.png",
"id": "9365abfe787a1bce3282c446a9ae9914204703a7fe",
"links": [],
"localizedScopeName": "Global",
"name": "Nominate for KB",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9365abfe787a1bce3282c446a9ae9914204703a7fe#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a follow-up e-mail to send the Customer regarding a question or update about the Incident. Allows the User to edit the e-mail before clicking Send. Attaches the e-mail to the Incident History Record.",
"displayName": "Follow-up E-mail",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "9344807867705870519cd54caf852e8600e42ed537",
"links": [],
"localizedScopeName": "Global",
"name": "FollowUp EMail",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9344807867705870519cd54caf852e8600e42ed537#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "When 3 days lapse from the last modified date time, sends a reminder e-mail to the Incident Owner to follow up with the Customer.",
"displayName": "SLA Escalate if not Touched in 3 Days",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "93a606bfdcaf4fa68bf8284a7d8e195bae5e851992",
"links": [],
"localizedScopeName": "Global",
"name": "SLA Escalate if not Touched in 3 Days",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93a606bfdcaf4fa68bf8284a7d8e195bae5e851992#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Makes the current user the owner of the Incident. \nChanges the Incident status from new to assigned.",
"displayName": "Take Ownership",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People._48x48.user2.png",
"id": "93d50acaac30f5fe73aef345cf923763d34f756c0c",
"links": [],
"localizedScopeName": "Global",
"name": "Take Ownership",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d50acaac30f5fe73aef345cf923763d34f756c0c#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Escalate to Level 3",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.users2.ico",
"id": "940794577aeb1e8265242c452eb83401abcefda781",
"links": [],
"localizedScopeName": "Global",
"name": "Escalate to Level 3",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:940794577aeb1e8265242c452eb83401abcefda781#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Escalation Complete",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.users3.ico",
"id": "940794cdb072fb6649a9fc49b8b3ce3f77760c9964",
"links": [],
"localizedScopeName": "Global",
"name": "Escalation Complete",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:940794cdb072fb6649a9fc49b8b3ce3f77760c9964#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates escalation task to predefined level 2 and level 3 teams based on data in Incident Subcategory table.",
"displayName": "Escalation to Level 2 and 3",
"galleryImage": "",
"id": "93f72f43c5c4979d75c5f547e795400ef411cb8a6b",
"links": [],
"localizedScopeName": "Global",
"name": "Invite pour le d\u00e9tails de la transmission au troisi\u00e8me",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93f72f43c5c4979d75c5f547e795400ef411cb8a6b#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates a Problem Record from the Incident. Adds the Problem to the Problem Management Queue.",
"displayName": "Create Problem from Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs.trafficlight_on.ico",
"id": "935ecc5e96f6f2e26994e445dd8be9fef86252399e",
"links": [],
"localizedScopeName": "Global",
"name": "Cria um problema de um incidente",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:935ecc5e96f6f2e26994e445dd8be9fef86252399e#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Create Incident",
"galleryImage": "",
"id": "93dbbd9b58b12daa093a9944d8a356e57cefd7d277",
"links": [],
"localizedScopeName": "Global",
"name": "Crear incidencia",
"parentFolder": "9386dfe936b88eacef32394c0c8a148924c6a10eca",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dbbd9b58b12daa093a9944d8a356e57cefd7d277#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Filter SCTs",
"galleryImage": "",
"id": "9411e83cb4677257b43dd24021aae88c85a3213805",
"links": [],
"localizedScopeName": "Global",
"name": "Filtrar SCTs",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9411e83cb4677257b43dd24021aae88c85a3213805#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Converts an Incident into a Major Incident",
"displayName": "Convert into Major Incident",
"galleryImage": "",
"id": "94434b2049907a382f535b4004a442ebae3c1af753",
"links": [],
"localizedScopeName": "Global",
"name": "Convert into Major Incident",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:94434b2049907a382f535b4004a442ebae3c1af753#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Abandons the incident and opens the default dashboard",
"displayName": "Cancel Incident",
"galleryImage": "",
"id": "944414556cbeebd3bf521840bdad54264072e6e430",
"links": [],
"localizedScopeName": "Global",
"name": "Cancel Incident",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:944414556cbeebd3bf521840bdad54264072e6e430#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Opens the current record",
"displayName": "Go to Record",
"galleryImage": "",
"id": "9445b97b516056a1278bb1483bb5c7f93e08e4635a",
"links": [],
"localizedScopeName": "Global",
"name": "Go to Record",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9445b97b516056a1278bb1483bb5c7f93e08e4635a#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Requester Follow Up Email",
"galleryImage": "",
"id": "9450a0600c044e15f723d349958b5dec22924863e8",
"links": [],
"localizedScopeName": "Global",
"name": "Requester Follow Up Email",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9450a0600c044e15f723d349958b5dec22924863e8#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates an e-mail to the Customer that her Incident was resolved. Allows the User to edit the e-mail before clicking Send. Attaches the e-mail to the Incident History Record.",
"displayName": "Resolved Confirmation",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "9454250878f3b7ff56de064ca781b2787105c8e667",
"links": [],
"localizedScopeName": "Global",
"name": "Confirma\u00e7\u00e3o de resolu\u00e7\u00e3o",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9454250878f3b7ff56de064ca781b2787105c8e667#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Recommended Assignee",
"galleryImage": "",
"id": "9454e641d3819fbf16c6394037af3814de18670bf8",
"links": [],
"localizedScopeName": "Global",
"name": "Recommended Assignee",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:9454e641d3819fbf16c6394037af3814de18670bf8#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Create and Send Survey",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.SubReport.ico",
"id": "943a2f7631f172ade8507347a5ada7b2a39daec900",
"links": [],
"localizedScopeName": "Global",
"name": "Create and Send Survey",
"parentFolder": "9386dfe7e0a85ff749cfe74aea867ee52ee2cd1cf1",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:943a2f7631f172ade8507347a5ada7b2a39daec900#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Sample Onestep Called from API",
"galleryImage": "",
"id": "947509fc528a451570e6c14223a9a8ca12b0856fc2",
"links": [],
"localizedScopeName": "Global",
"name": "Sample Onestep Called from API",
"parentFolder": "",
"parentIsScopeFolder": true,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:947509fc528a451570e6c14223a9a8ca12b0856fc2#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
],
"Record Templates": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Closes an Incident Record as a duplicate of another Incident. Prompts the User to enter the number (RecID) of the Incident that it duplicates.",
"displayName": "Close as Duplicate",
"galleryImage": "",
"id": "938737bddabf85fd0c881a4c26b93982d9411e91ef",
"links": [],
"localizedScopeName": "Global",
"name": "Close as Duplicate",
"parentFolder": "9386dfe936b88eacef32394c0c8a148924c6a10eca",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:938737bddabf85fd0c881a4c26b93982d9411e91ef#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Create Incident",
"galleryImage": "",
"id": "93dbbd9b58b12daa093a9944d8a356e57cefd7d277",
"links": [],
"localizedScopeName": "Global",
"name": "Crear incidencia",
"parentFolder": "9386dfe936b88eacef32394c0c8a148924c6a10eca",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93dbbd9b58b12daa093a9944d8a356e57cefd7d277#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
],
"Service Request Models": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates and sends an e-mail to a Customer that her request for a new employee computer is denied. Attaches the e-mail to the Incident History Record.",
"displayName": "New Employee Request Denied",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "93d5744310efa377c99eac4cd6a029e203095cfdf6",
"links": [],
"localizedScopeName": "Global",
"name": "New Employee Request Denied",
"parentFolder": "9386dfe9a8b61715d6adac4b2eaf97ea07f8c59026",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d5744310efa377c99eac4cd6a029e203095cfdf6#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates Tasks for new employee items and adds request to New Request Queue.",
"displayName": "New Employee Tasks",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.woman1.ico",
"id": "93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b",
"links": [],
"localizedScopeName": "Global",
"name": "New Employee Tasks",
"parentFolder": "9386dfe9a8b61715d6adac4b2eaf97ea07f8c59026",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
],
"Workflow Actions": [
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Escalate to Level 3",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.users2.ico",
"id": "940794577aeb1e8265242c452eb83401abcefda781",
"links": [],
"localizedScopeName": "Global",
"name": "Escalate to Level 3",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:940794577aeb1e8265242c452eb83401abcefda781#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "",
"displayName": "Escalation Complete",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People.users3.ico",
"id": "940794cdb072fb6649a9fc49b8b3ce3f77760c9964",
"links": [],
"localizedScopeName": "Global",
"name": "Escalation Complete",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:940794cdb072fb6649a9fc49b8b3ce3f77760c9964#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Creates escalation task to predefined level 2 and level 3 teams based on data in Incident Subcategory table.",
"displayName": "Escalation to Level 2 and 3",
"galleryImage": "",
"id": "93f72f43c5c4979d75c5f547e795400ef411cb8a6b",
"links": [],
"localizedScopeName": "Global",
"name": "Invite pour le d\u00e9tails de la transmission au troisi\u00e8me",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93f72f43c5c4979d75c5f547e795400ef411cb8a6b#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Changes the Incident Status from Resolved to Reopened, and clears the resolution fields that are used with the Email Monitor. Sets the Resolved Time in minutes and the Total STC Time in minutes to restart the SLA Clock.",
"displayName": "Reopen Incident",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Common.Unlock32.png",
"id": "93c28182ecc977b3dab73446549d977a008cd84ad2",
"links": [],
"localizedScopeName": "Global",
"name": "Reopen Incident",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93c28182ecc977b3dab73446549d977a008cd84ad2#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "When 3 days lapse from the last modified date time, sends a reminder e-mail to the Incident Owner to follow up with the Customer.",
"displayName": "SLA Escalate if not Touched in 3 Days",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.BusObs._32x32.mail2.png",
"id": "93a606bfdcaf4fa68bf8284a7d8e195bae5e851992",
"links": [],
"localizedScopeName": "Global",
"name": "SLA Escalate if not Touched in 3 Days",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93a606bfdcaf4fa68bf8284a7d8e195bae5e851992#Owner:6dd53665c0c24cab86870a21cf6434ae"
},
{
"association": "6dd53665c0c24cab86870a21cf6434ae",
"description": "Makes the current user the owner of the Incident. \nChanges the Incident status from new to assigned.",
"displayName": "Take Ownership",
"galleryImage": "[PlugIn]Images;Trebuchet.PlugIn.Images.Images.Public.People._48x48.user2.png",
"id": "93d50acaac30f5fe73aef345cf923763d34f756c0c",
"links": [],
"localizedScopeName": "Global",
"name": "Take Ownership",
"parentFolder": "93a78f732e67cfbcf4df6c4276a48c2bb32443dfa7",
"parentIsScopeFolder": false,
"scope": "Global",
"scopeOwner": "(None)",
"standInKey": "DefType:OneStepDef#Scope:Global#Id:93d50acaac30f5fe73aef345cf923763d34f756c0c#Owner:6dd53665c0c24cab86870a21cf6434ae"
}
]
},
"BusinessObjectId": "6dd53665c0c24cab86870a21cf6434ae"
}
}
}
Human Readable Output
Global one-step actions
Name Display Name Description Id Association Stand In Key RDP to Primary CI RDP to Primary CI Launches Remote Desktop Connection (MSTSC.exe) to the selected CI. Assumes the current User has rights to use remote desktop and remote connections are configured on the target CI. 939850e292d4b54454e9d8471db023c97db04ec279 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:939850e292d4b54454e9d8471db023c97db04ec279#Owner:6dd53665c0c24cab86870a21cf6434ae Ping System Ping System Pings the Primary CI (specified on the Incident Form) using the IP Address provided in the CI details. 9379e37ed996514927afa143658d9d46c06b3f1558 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9379e37ed996514927afa143658d9d46c06b3f1558#Owner:6dd53665c0c24cab86870a21cf6434ae Reboot Computer Reboot Computer Reboots the Primary CI (specified on the Incident Form), and then updates the Close Description field to track that the CI was rebooted. 936592312d5676ab8accd94673a45ceaa41777e31e 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:936592312d5676ab8accd94673a45ceaa41777e31e#Owner:6dd53665c0c24cab86870a21cf6434ae Clone Current Incident Clone Current Incident Clones information from the current Incident into a new Incident Record. Populates the Description, Call Source, Categorization, and Priority fields with information from the cloned record. 9389f945cc0784caad651a491db626b6baf78bb19c 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9389f945cc0784caad651a491db626b6baf78bb19c#Owner:6dd53665c0c24cab86870a21cf6434ae Not Available Not Available Displays a popup message if the individual selected as the Incident Owner is out of the office (as defined in the UserInfo Time-off dates). 93b2c31172b273237c7311487b9c6eace6fcdef071 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93b2c31172b273237c7311487b9c6eace6fcdef071#Owner:6dd53665c0c24cab86870a21cf6434ae Call Contact Call Contact Launches Skype to contact the Customer. 9389e70ed88b73a6b1393948a0951e25993cff6c66 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9389e70ed88b73a6b1393948a0951e25993cff6c66#Owner:6dd53665c0c24cab86870a21cf6434ae Create Change from Incident Create Change from Incident Changes the Incident Status to Pending and creates a Change Request Record from the current Incident. Prompts User to select a reason and enter a short title for the Change, and links the Change Request to the Incident. 9378b5149c22e1173219ac42a699f88b881885bc11 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9378b5149c22e1173219ac42a699f88b881885bc11#Owner:6dd53665c0c24cab86870a21cf6434ae New Employee Request Denied New Employee Request Denied Creates and sends an e-mail to a Customer that her request for a new employee computer is denied. Attaches the e-mail to the Incident History Record. 93d5744310efa377c99eac4cd6a029e203095cfdf6 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d5744310efa377c99eac4cd6a029e203095cfdf6#Owner:6dd53665c0c24cab86870a21cf6434ae Create a Journal Note Entry for Incident Create a Journal Note Entry for Incident Create a new Journal - Note entry for Incident. Used primarily in iCherwell. 93dfb39503a41fb67670734ef495fd0c34216726de 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dfb39503a41fb67670734ef495fd0c34216726de#Owner:6dd53665c0c24cab86870a21cf6434ae Crear una tarea con el tiempo dedicado Create a Task with Time Spent Creates a Task with a Status of In-Progress and prompts the user for a Title, Description and Time Spent. Used primarily in iCherwell 93dfb3fc4f3339c24f199d4eed888d50a2da3e2908 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dfb3fc4f3339c24f199d4eed888d50a2da3e2908#Owner:6dd53665c0c24cab86870a21cf6434ae New Employee Tasks New Employee Tasks Creates Tasks for new employee items and adds request to New Request Queue. 93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b#Owner:6dd53665c0c24cab86870a21cf6434ae Create Standard Change from Incident Create Standard Change from Incident Creates a Change Request Record from the current Incident. 93e2938fd4d656b25516ba41b986365596101e39a5 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93e2938fd4d656b25516ba41b986365596101e39a5#Owner:6dd53665c0c24cab86870a21cf6434ae Reopen Incident Reopen Incident Changes the Incident Status from Resolved to Reopened, and clears the resolution fields that are used with the Email Monitor. Sets the Resolved Time in minutes and the Total STC Time in minutes to restart the SLA Clock. 93c28182ecc977b3dab73446549d977a008cd84ad2 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93c28182ecc977b3dab73446549d977a008cd84ad2#Owner:6dd53665c0c24cab86870a21cf6434ae Reset Password Reset Password Sets password for selected User or Customer to “ChangeMe,” and sets account to active if locked out. Updates Incident Form to indicate that password was reset and changes Status to Resolved. 935467d76aacbb0fe7317345f58cc75e38c6640e38 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:935467d76aacbb0fe7317345f58cc75e38c6640e38#Owner:6dd53665c0c24cab86870a21cf6434ae Marcar tempo da tarefa contra o incidente Track Task Time Against Incident Creates a Task time tracking entry and prompts the User for time spent and task completion details. Sets the Task Close Code to Completed. 93d4ee5220e714428a9a4f4189a329409e69e48056 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d4ee5220e714428a9a4f4189a329409e69e48056#Owner:6dd53665c0c24cab86870a21cf6434ae Set Incident Status to Resolved Set Incident Status to Resolved Sets the Incident Status to Resolved. Used for Mobile Apps. 93dcaa69fd0dee94e4f1f24cb6b86395bfb5cdbe77 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dcaa69fd0dee94e4f1f24cb6b86395bfb5cdbe77#Owner:6dd53665c0c24cab86870a21cf6434ae Impacted CIs Button Actions Impacted CI’s Button Actions Conditional expression One-Step that shows a Configuration Map 93dfe7325dd236465ec873418e97ca948f738974a0 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dfe7325dd236465ec873418e97ca948f738974a0#Owner:6dd53665c0c24cab86870a21cf6434ae Close as Duplicate Close as Duplicate Closes an Incident Record as a duplicate of another Incident. Prompts the User to enter the number (RecID) of the Incident that it duplicates. 938737bddabf85fd0c881a4c26b93982d9411e91ef 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:938737bddabf85fd0c881a4c26b93982d9411e91ef#Owner:6dd53665c0c24cab86870a21cf6434ae Close Request Close Request 93c281891b5c3819fe72934f6da3ca31efa03f7023 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93c281891b5c3819fe72934f6da3ca31efa03f7023#Owner:6dd53665c0c24cab86870a21cf6434ae Set Incident to Priority One Set Incident to Priority One Sets the Incident Priority to 1. Used for iCherwell and Android Mobile Apps. 93dcaa73f25bd4c232c8b94ca1b29a0a63b5d4ee4b 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dcaa73f25bd4c232c8b94ca1b29a0a63b5d4ee4b#Owner:6dd53665c0c24cab86870a21cf6434ae Nominate for KB Nominate for KB Creates a new Knowledge Article (KA) populated with the Categorization, Description and Solution/Workaround from the Incident. 9365abfe787a1bce3282c446a9ae9914204703a7fe 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9365abfe787a1bce3282c446a9ae9914204703a7fe#Owner:6dd53665c0c24cab86870a21cf6434ae FollowUp EMail Follow-up E-mail Creates a follow-up e-mail to send the Customer regarding a question or update about the Incident. Allows the User to edit the e-mail before clicking Send. Attaches the e-mail to the Incident History Record. 9344807867705870519cd54caf852e8600e42ed537 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9344807867705870519cd54caf852e8600e42ed537#Owner:6dd53665c0c24cab86870a21cf6434ae SLA Escalate if not Touched in 3 Days SLA Escalate if not Touched in 3 Days When 3 days lapse from the last modified date time, sends a reminder e-mail to the Incident Owner to follow up with the Customer. 93a606bfdcaf4fa68bf8284a7d8e195bae5e851992 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93a606bfdcaf4fa68bf8284a7d8e195bae5e851992#Owner:6dd53665c0c24cab86870a21cf6434ae Take Ownership Take Ownership Makes the current user the owner of the Incident.
Changes the Incident status from new to assigned.93d50acaac30f5fe73aef345cf923763d34f756c0c 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d50acaac30f5fe73aef345cf923763d34f756c0c#Owner:6dd53665c0c24cab86870a21cf6434ae Escalate to Level 3 Escalate to Level 3 940794577aeb1e8265242c452eb83401abcefda781 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:940794577aeb1e8265242c452eb83401abcefda781#Owner:6dd53665c0c24cab86870a21cf6434ae Escalation Complete Escalation Complete 940794cdb072fb6649a9fc49b8b3ce3f77760c9964 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:940794cdb072fb6649a9fc49b8b3ce3f77760c9964#Owner:6dd53665c0c24cab86870a21cf6434ae Invite pour le détails de la transmission au troisième Escalation to Level 2 and 3 Creates escalation task to predefined level 2 and level 3 teams based on data in Incident Subcategory table. 93f72f43c5c4979d75c5f547e795400ef411cb8a6b 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93f72f43c5c4979d75c5f547e795400ef411cb8a6b#Owner:6dd53665c0c24cab86870a21cf6434ae Cria um problema de um incidente Create Problem from Incident Creates a Problem Record from the Incident. Adds the Problem to the Problem Management Queue. 935ecc5e96f6f2e26994e445dd8be9fef86252399e 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:935ecc5e96f6f2e26994e445dd8be9fef86252399e#Owner:6dd53665c0c24cab86870a21cf6434ae Crear incidencia Create Incident 93dbbd9b58b12daa093a9944d8a356e57cefd7d277 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dbbd9b58b12daa093a9944d8a356e57cefd7d277#Owner:6dd53665c0c24cab86870a21cf6434ae Filtrar SCTs Filter SCTs 9411e83cb4677257b43dd24021aae88c85a3213805 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9411e83cb4677257b43dd24021aae88c85a3213805#Owner:6dd53665c0c24cab86870a21cf6434ae Convert into Major Incident Convert into Major Incident Converts an Incident into a Major Incident 94434b2049907a382f535b4004a442ebae3c1af753 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:94434b2049907a382f535b4004a442ebae3c1af753#Owner:6dd53665c0c24cab86870a21cf6434ae Cancel Incident Cancel Incident Abandons the incident and opens the default dashboard 944414556cbeebd3bf521840bdad54264072e6e430 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:944414556cbeebd3bf521840bdad54264072e6e430#Owner:6dd53665c0c24cab86870a21cf6434ae Go to Record Go to Record Opens the current record 9445b97b516056a1278bb1483bb5c7f93e08e4635a 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9445b97b516056a1278bb1483bb5c7f93e08e4635a#Owner:6dd53665c0c24cab86870a21cf6434ae Requester Follow Up Email Requester Follow Up Email 9450a0600c044e15f723d349958b5dec22924863e8 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9450a0600c044e15f723d349958b5dec22924863e8#Owner:6dd53665c0c24cab86870a21cf6434ae Confirmação de resolução Resolved Confirmation Creates an e-mail to the Customer that her Incident was resolved. Allows the User to edit the e-mail before clicking Send. Attaches the e-mail to the Incident History Record. 9454250878f3b7ff56de064ca781b2787105c8e667 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9454250878f3b7ff56de064ca781b2787105c8e667#Owner:6dd53665c0c24cab86870a21cf6434ae Recommended Assignee Recommended Assignee 9454e641d3819fbf16c6394037af3814de18670bf8 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9454e641d3819fbf16c6394037af3814de18670bf8#Owner:6dd53665c0c24cab86870a21cf6434ae Create and Send Survey Create and Send Survey 943a2f7631f172ade8507347a5ada7b2a39daec900 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:943a2f7631f172ade8507347a5ada7b2a39daec900#Owner:6dd53665c0c24cab86870a21cf6434ae Sample Onestep Called from API Sample Onestep Called from API 947509fc528a451570e6c14223a9a8ca12b0856fc2 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:947509fc528a451570e6c14223a9a8ca12b0856fc2#Owner:6dd53665c0c24cab86870a21cf6434ae Buttons one-step actions
Name Display Name Description Id Association Stand In Key Call Contact Call Contact Launches Skype to contact the Customer. 9389e70ed88b73a6b1393948a0951e25993cff6c66 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9389e70ed88b73a6b1393948a0951e25993cff6c66#Owner:6dd53665c0c24cab86870a21cf6434ae Cancel Incident Cancel Incident Abandons the incident and opens the default dashboard 944414556cbeebd3bf521840bdad54264072e6e430 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:944414556cbeebd3bf521840bdad54264072e6e430#Owner:6dd53665c0c24cab86870a21cf6434ae Crear una tarea con el tiempo dedicado Create a Task with Time Spent Creates a Task with a Status of In-Progress and prompts the user for a Title, Description and Time Spent. Used primarily in iCherwell 93dfb3fc4f3339c24f199d4eed888d50a2da3e2908 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dfb3fc4f3339c24f199d4eed888d50a2da3e2908#Owner:6dd53665c0c24cab86870a21cf6434ae Create and Send Survey Create and Send Survey 943a2f7631f172ade8507347a5ada7b2a39daec900 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:943a2f7631f172ade8507347a5ada7b2a39daec900#Owner:6dd53665c0c24cab86870a21cf6434ae Create Change from Incident Create Change from Incident Changes the Incident Status to Pending and creates a Change Request Record from the current Incident. Prompts User to select a reason and enter a short title for the Change, and links the Change Request to the Incident. 9378b5149c22e1173219ac42a699f88b881885bc11 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9378b5149c22e1173219ac42a699f88b881885bc11#Owner:6dd53665c0c24cab86870a21cf6434ae Cria um problema de um incidente Create Problem from Incident Creates a Problem Record from the Incident. Adds the Problem to the Problem Management Queue. 935ecc5e96f6f2e26994e445dd8be9fef86252399e 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:935ecc5e96f6f2e26994e445dd8be9fef86252399e#Owner:6dd53665c0c24cab86870a21cf6434ae Create Standard Change from Incident Create Standard Change from Incident Creates a Change Request Record from the current Incident. 93e2938fd4d656b25516ba41b986365596101e39a5 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93e2938fd4d656b25516ba41b986365596101e39a5#Owner:6dd53665c0c24cab86870a21cf6434ae Impacted CIs Button Actions Impacted CI’s Button Actions Conditional expression One-Step that shows a Configuration Map 93dfe7325dd236465ec873418e97ca948f738974a0 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dfe7325dd236465ec873418e97ca948f738974a0#Owner:6dd53665c0c24cab86870a21cf6434ae Nominate for KB Nominate for KB Creates a new Knowledge Article (KA) populated with the Categorization, Description and Solution/Workaround from the Incident. 9365abfe787a1bce3282c446a9ae9914204703a7fe 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9365abfe787a1bce3282c446a9ae9914204703a7fe#Owner:6dd53665c0c24cab86870a21cf6434ae Marcar tempo da tarefa contra o incidente Track Task Time Against Incident Creates a Task time tracking entry and prompts the User for time spent and task completion details. Sets the Task Close Code to Completed. 93d4ee5220e714428a9a4f4189a329409e69e48056 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d4ee5220e714428a9a4f4189a329409e69e48056#Owner:6dd53665c0c24cab86870a21cf6434ae Config Item Tasks one-step actions
Name Display Name Description Id Association Stand In Key Ping System Ping System Pings the Primary CI (specified on the Incident Form) using the IP Address provided in the CI details. 9379e37ed996514927afa143658d9d46c06b3f1558 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:9379e37ed996514927afa143658d9d46c06b3f1558#Owner:6dd53665c0c24cab86870a21cf6434ae RDP to Primary CI RDP to Primary CI Launches Remote Desktop Connection (MSTSC.exe) to the selected CI. Assumes the current User has rights to use remote desktop and remote connections are configured on the target CI. 939850e292d4b54454e9d8471db023c97db04ec279 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:939850e292d4b54454e9d8471db023c97db04ec279#Owner:6dd53665c0c24cab86870a21cf6434ae Reboot Computer Reboot Computer Reboots the Primary CI (specified on the Incident Form), and then updates the Close Description field to track that the CI was rebooted. 936592312d5676ab8accd94673a45ceaa41777e31e 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:936592312d5676ab8accd94673a45ceaa41777e31e#Owner:6dd53665c0c24cab86870a21cf6434ae Reset Password Reset Password Sets password for selected User or Customer to “ChangeMe,” and sets account to active if locked out. Updates Incident Form to indicate that password was reset and changes Status to Resolved. 935467d76aacbb0fe7317345f58cc75e38c6640e38 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:935467d76aacbb0fe7317345f58cc75e38c6640e38#Owner:6dd53665c0c24cab86870a21cf6434ae Record Templates one-step actions
Name Display Name Description Id Association Stand In Key Close as Duplicate Close as Duplicate Closes an Incident Record as a duplicate of another Incident. Prompts the User to enter the number (RecID) of the Incident that it duplicates. 938737bddabf85fd0c881a4c26b93982d9411e91ef 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:938737bddabf85fd0c881a4c26b93982d9411e91ef#Owner:6dd53665c0c24cab86870a21cf6434ae Crear incidencia Create Incident 93dbbd9b58b12daa093a9944d8a356e57cefd7d277 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93dbbd9b58b12daa093a9944d8a356e57cefd7d277#Owner:6dd53665c0c24cab86870a21cf6434ae Service Request Models one-step actions
Name Display Name Description Id Association Stand In Key New Employee Request Denied New Employee Request Denied Creates and sends an e-mail to a Customer that her request for a new employee computer is denied. Attaches the e-mail to the Incident History Record. 93d5744310efa377c99eac4cd6a029e203095cfdf6 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d5744310efa377c99eac4cd6a029e203095cfdf6#Owner:6dd53665c0c24cab86870a21cf6434ae New Employee Tasks New Employee Tasks Creates Tasks for new employee items and adds request to New Request Queue. 93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93b51a73bd4eabbc7d81614d06ab3de5fd9ad4756b#Owner:6dd53665c0c24cab86870a21cf6434ae Workflow Actions one-step actions
Name Display Name Description Id Association Stand In Key Escalate to Level 3 Escalate to Level 3 940794577aeb1e8265242c452eb83401abcefda781 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:940794577aeb1e8265242c452eb83401abcefda781#Owner:6dd53665c0c24cab86870a21cf6434ae Escalation Complete Escalation Complete 940794cdb072fb6649a9fc49b8b3ce3f77760c9964 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:940794cdb072fb6649a9fc49b8b3ce3f77760c9964#Owner:6dd53665c0c24cab86870a21cf6434ae Invite pour le détails de la transmission au troisième Escalation to Level 2 and 3 Creates escalation task to predefined level 2 and level 3 teams based on data in Incident Subcategory table. 93f72f43c5c4979d75c5f547e795400ef411cb8a6b 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93f72f43c5c4979d75c5f547e795400ef411cb8a6b#Owner:6dd53665c0c24cab86870a21cf6434ae Reopen Incident Reopen Incident Changes the Incident Status from Resolved to Reopened, and clears the resolution fields that are used with the Email Monitor. Sets the Resolved Time in minutes and the Total STC Time in minutes to restart the SLA Clock. 93c28182ecc977b3dab73446549d977a008cd84ad2 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93c28182ecc977b3dab73446549d977a008cd84ad2#Owner:6dd53665c0c24cab86870a21cf6434ae SLA Escalate if not Touched in 3 Days SLA Escalate if not Touched in 3 Days When 3 days lapse from the last modified date time, sends a reminder e-mail to the Incident Owner to follow up with the Customer. 93a606bfdcaf4fa68bf8284a7d8e195bae5e851992 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93a606bfdcaf4fa68bf8284a7d8e195bae5e851992#Owner:6dd53665c0c24cab86870a21cf6434ae Take Ownership Take Ownership Makes the current user the owner of the Incident.
Changes the Incident status from new to assigned.93d50acaac30f5fe73aef345cf923763d34f756c0c 6dd53665c0c24cab86870a21cf6434ae DefType:OneStepDef#Scope:Global#Id:93d50acaac30f5fe73aef345cf923763d34f756c0c#Owner:6dd53665c0c24cab86870a21cf6434ae
cherwell-run-one-step-action-on-business-object
Run a One-Step Action using a OneStepActionRequest. This request is used to start a One-Step Action run with additional information, such as prompt values.
Base Command
cherwell-run-one-step-action-on-business-object
Input
| Argument Name | Description | Required |
|---|---|---|
| busobjectid | The ID of the business object. | Required |
| busobrecid | The ID of the business object record. | Required |
| oneStepAction_StandInKey | The key to find the One-Step Action to run. You can get it using the command cherwell-get-one-step-actions-for-business-object. | Required |
| prompt_values | Additional information to run the action in JSON format. | Required |
Context Output
| Path | Type | Description |
| — | — | — |
Command Example
!cherwell-run-one-step-action-on-business-object busobjectid=6dd53665c0c24cab86870a21cf6434ae busobrecid=94757184cce46253b3ab694ae58289b64d0cd867ce oneStepAction_StandInKey=DefType:OneStepDef#Scope:Global#Id:947509fc528a451570e6c14223a9a8ca12b0856fc2#Owner:6dd53665c0c24cab86870a21cf6434ae prompt_values=[{"promptDefId": "947509fe4c84176152bcaa472b929d556b47c5df6d","value": "This is from the REST API"}]
Human Readable Output
One-Step action has been executed successfully.
Configuration parameters
url— URL (example: https://my.domain.com) (required)credentials— Username (required)client_id— Client id (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settingsfetch_time— First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)objects_to_fetch— CSV list of objects to fetch. The default is incident, for example: incident,problem,service)max_results— Max results to fetch (defualt is 30)query_string— Advanced Query to fetch (see integration detailed instructions)fetch_attachments— Fetch attachments (include attachements in fetch process)isFetch— Fetch incidentsincidentType— Incident typeincidentFetchInterval— Incidents Fetch Interval
Commands (17)
-
cherwell-create-business-objectCreates a business object.
-
cherwell-delete-business-objectDeletes a given business object.
-
cherwell-download-attachmentsDownloads imported attachements from a specified business object.
-
cherwell-get-attachments-infoGets information for business object attachments.
-
cherwell-get-business-objectGets a business object by an ID.
-
cherwell-get-business-object-idGet a general business object id by name
-
cherwell-get-business-object-summaryGet a business object summary by name or ID.
-
cherwell-get-field-infoGets information for a field, by one of its properties (Name, Display Name, or id).
-
cherwell-get-one-step-actions-for-business-objectGet One-Step Actions by business object ID.
-
cherwell-link-business-objectsLinks business objects that are related.
-
cherwell-query-business-objectRuns advanced queries to search in a specified business object.
-
cherwell-remove-attachmentRemove the attachment from the specified business object.
-
cherwell-run-one-step-action-on-business-objectRun a One-Step Action using a OneStepActionRequest. This request is used to start a One-Step Action run with additional information, such as prompt values.
-
cherwell-run-saved-searchReturns the results of a saved search.
-
cherwell-unlink-business-objectsUnlinks business objects that are linked and related.
-
cherwell-update-business-objectUpdate a business object with the specified fields.
-
cherwell-upload-attachmentUploads an attachment to a specified business object.
import demistomock as demisto from CommonServerPython import * from CommonServerUserPython import * """ IMPORTS """ import json import requests import traceback from datetime import datetime, timedelta import os import urllib3 # Disable insecure warnings urllib3.disable_warnings() """ GLOBALS/PARAMS """ FETCHES_INCIDENTS = "" FETCH_TIME = "" FETCH_ATTACHMENTS = "" OBJECTS_TO_FETCH = "" MAX_RESULT = "" USERNAME = "" PASSWORD = "" SERVER = "" SECURED = False CLIENT_ID = "" QUERY_STRING = "" DATE_FORMAT = "" BASE_URL = "" HTTP_CODES = {"unauthorized": 401, "internal_server_error": 500, "success": 200} HEADERS = {"Content-Type": "application/json", "Accept": "application/json"} QUERY_OPERATORS = ["eq", "gt", "lt", "contains", "startswith"] ONE_STEP_ACTION_HEADERS = ["name", "displayName", "description", "id", "association", "standInKey"] ####################################################################################################################### """ HELPER FUNCTIONS """ def parse_response(response, error_operation, file_content=False, is_fetch=False): try: response.raise_for_status() if not response.content: return None if file_content: return response.content else: return response.json() except requests.exceptions.HTTPError: try: res_json = response.json() err_msg = res_json.get("errorMessage") or res_json.get("error_description") or res_json.get("Message") except Exception: err_msg = response.content.decode("utf-8") raise_or_return_error(error_operation + ": " + str(err_msg), is_fetch) except Exception as error: raise_or_return_error(f"Could not parse response {error}", is_fetch) def cherwell_dict_parser(key, value, item_list): new_dict = {} for item in item_list: field_key = item.get(key) new_dict[field_key] = item.get(value) return new_dict def parse_fields_from_business_object(field_list): new_business_obj = cherwell_dict_parser("name", "value", field_list) return new_business_obj def parse_fields_from_business_object_list(response): object_list = [] if not response.get("businessObjects"): return [] for business_obj in response.get("businessObjects"): new_business_obj = parse_fields_from_business_object(business_obj.get("fields")) new_business_obj["BusinessObjectId"] = business_obj.get("busObId") new_business_obj["PublicId"] = business_obj.get("busObPublicId") new_business_obj["RecordId"] = business_obj.get("busObRecId") object_list.append(new_business_obj) return object_list def build_fields_for_business_object(data_dict, ids_dict): fields = [] for key, value in data_dict.items(): new_field = {"dirty": "true", "fieldId": ids_dict.get(key), "name": key, "value": value} fields.append(new_field) return fields def http_request(method, url, payload, token=None, custom_headers=None, is_fetch=False): headers = build_headers(token, custom_headers) try: response = requests.request(method, url, data=payload, headers=headers, verify=SECURED) except requests.exceptions.ConnectionError as e: err_message = f"Error connecting to server. Check your URL/Proxy/Certificate settings: {e}" raise_or_return_error(err_message, is_fetch) return response def request_new_access_token(using_refresh): url = BASE_URL + "token" refresh_token = demisto.getIntegrationContext().get("refresh_token") if using_refresh: payload = f"client_id={CLIENT_ID}&grant_type=refresh_token&refresh_token={refresh_token}" else: payload = f"client_id={CLIENT_ID}&grant_type=password&username={USERNAME}&password={PASSWORD}" headers = { "Accept": "application/json", "Content-Type": "application/x-www-form-urlencoded", } response = http_request("POST", url, payload, custom_headers=headers) return response def get_new_access_token(is_fetch=False): response = request_new_access_token(True) if response.status_code != HTTP_CODES["success"]: response = request_new_access_token(False) res_json = parse_response( response, "Could not get token. Check your credentials (user/password/client id) and try again", is_fetch=is_fetch ) token_expiration_time = int(date_to_timestamp(res_json.get(".expires"), "%a, %d %b %Y %H:%M:%S GMT")) demisto.setIntegrationContext( { "refresh_token": res_json.get("refresh_token"), "token_expiration_time": token_expiration_time, "access_token": res_json.get("access_token"), } ) return res_json.get("access_token") def get_access_token(new_token, is_fetch=False): integration_context = demisto.getIntegrationContext() token_expiration_time = integration_context.get("token_expiration_time") current_time = date_to_timestamp(datetime.utcnow()) if new_token or not token_expiration_time or token_expiration_time < current_time: token = get_new_access_token(is_fetch=is_fetch) return token else: return integration_context.get("access_token") def build_headers(token, headers=None): headers = headers if headers else HEADERS headers["Authorization"] = f"Bearer {token}" return headers def make_request(method, url, payload=None, headers=None, is_fetch=False): token = get_access_token(False, is_fetch=is_fetch) response = http_request(method, url, payload, token, custom_headers=headers, is_fetch=is_fetch) if response.status_code == HTTP_CODES["unauthorized"]: token = get_access_token(True, is_fetch=is_fetch) response = http_request(method, url, payload, token, custom_headers=headers, is_fetch=is_fetch) return response def get_business_object_summary_by_name(name, is_fetch=False): url = BASE_URL + f"api/V1/getbusinessobjectsummary/busobname/{name}" response = make_request("GET", url, is_fetch=is_fetch) return parse_response(response, "Could not get business object summary", is_fetch=is_fetch) def get_business_object_summary_by_id(_id, is_fetch=False): url = BASE_URL + f"api/V1/getbusinessobjectsummary/busobid/{_id}" response = make_request("GET", url, is_fetch=is_fetch) return parse_response(response, "Could not get business object summary", is_fetch=is_fetch) def resolve_business_object_id_by_name(name, is_fetch=False): res = get_business_object_summary_by_name(name, is_fetch) if not res: err_message = f'Could not retrieve "{name}" business object id. Make sure "{name}" is a valid business object.' raise_or_return_error(err_message, is_fetch) return res[0].get("busObId") def save_business_object(payload): url = BASE_URL + "api/V1/savebusinessobject" response = make_request("POST", url, json.dumps(payload)) return parse_response(response, "Could not save business object") def get_business_object_record(business_object_id, object_id, id_type): id_type_str = "publicid" if id_type == "public_id" else "busobrecid" url = BASE_URL + f"api/V1/getbusinessobject/busobid/{business_object_id}/{id_type_str}/{object_id}" response = make_request("GET", url) return parse_response(response, "Could not get business objects") def delete_business_object_record(business_object_id, object_id, id_type): id_type_str = "publicid" if id_type == "public_id" else "busobrecid" url = BASE_URL + f"api/V1/deletebusinessobject/busobid/{business_object_id}/{id_type_str}/{object_id}" response = make_request("DELETE", url) return parse_response(response, "Could not delete business object") def get_search_results(payload, is_fetch=False): url = BASE_URL + "api/V1/getsearchresults" response = make_request("POST", url, json.dumps(payload)) return parse_response(response, "Could not search for business objects", is_fetch=is_fetch) def get_business_object_template(business_object_id, include_all=True, field_names=None, fields_ids=None, is_fetch=False): url = BASE_URL + "api/V1/getbusinessobjecttemplate" payload = {"busObId": business_object_id, "includeAll": include_all} if field_names: payload["fieldNames"] = field_names if fields_ids: payload["fieldIds"] = fields_ids response = make_request("POST", url, json.dumps(payload), is_fetch=is_fetch) return parse_response(response, "Could not get business object template", is_fetch=is_fetch) def build_business_object_json(simple_json, business_object_id, object_id=None, id_type=None): business_object_ids_dict = get_key_value_dict_from_template("name", "fieldId", business_object_id) fields_for_business_object = build_fields_for_business_object(simple_json, business_object_ids_dict) business_object_json = {"busObId": business_object_id, "fields": fields_for_business_object} if object_id: id_key = "busObPublicId" if id_type == "public_id" else "busObRecId" business_object_json[id_key] = object_id return business_object_json def create_business_object(name, data_json): business_object_id = resolve_business_object_id_by_name(name) business_object_json = build_business_object_json(data_json, business_object_id) return save_business_object(business_object_json) def update_business_object(name, data_json, object_id, id_type): business_object_id = resolve_business_object_id_by_name(name) business_object_json = build_business_object_json(data_json, business_object_id, object_id, id_type) return save_business_object(business_object_json) def get_business_object(name, object_id, id_type): business_object_id = resolve_business_object_id_by_name(name) results = get_business_object_record(business_object_id, object_id, id_type) parsed_business_object = parse_fields_from_business_object(results.get("fields")) parsed_business_object["PublicId"] = results.get("busObPublicId") parsed_business_object["RecordId"] = results.get("busObRecId") return parsed_business_object, results def delete_business_object(name, object_id, id_type): business_object_id = resolve_business_object_id_by_name(name) return delete_business_object_record(business_object_id, object_id, id_type) def download_attachment_from_business_object(attachment, is_fetch): attachment_id = attachment.get("attachmentId") business_object_id = attachment.get("busObId") business_record_id = attachment.get("busObRecId") url = ( BASE_URL + f"api/V1/getbusinessobjectattachment" f"/attachmentid/{attachment_id}/busobid/{business_object_id}/busobrecid/{business_record_id}" ) response = make_request("GET", url, is_fetch=is_fetch) return parse_response(response, f"Unable to get content of attachment {attachment_id}", file_content=True, is_fetch=is_fetch) def get_attachments_content(attachments_to_download, is_fetch): attachments = [] for attachment in attachments_to_download: new_attachment = { "FileName": attachment.get("displayText"), "CreatedAt": attachment.get("created"), "Content": download_attachment_from_business_object(attachment, is_fetch=is_fetch), } attachments.append(new_attachment) return attachments def get_attachments_details(id_type, object_id, object_type_name, object_type_id, type, attachment_type, is_fetch=False): id_type_str = "publicid" if id_type == "public_id" else "busobrecid" business_object_type_str = "busobid" if object_type_id else "busobname" object_type = object_type_id if object_type_id else object_type_name url = ( BASE_URL + f"api/V1/getbusinessobjectattachments/" f"{business_object_type_str}/{object_type}/" f"{id_type_str}/{object_id}" f"/type/{type}" f"/attachmenttype/{attachment_type}" ) response = make_request("GET", url, is_fetch=is_fetch) return parse_response(response, f"Unable to get attachments for {object_type} {object_id}", is_fetch=is_fetch) def download_attachments(id_type, object_id, business_object_type_name=None, business_object_type_id=None, is_fetch=False): type = "File" attachment_type = "Imported" result = get_attachments_details( id_type, object_id, business_object_type_name, business_object_type_id, type, attachment_type, is_fetch=is_fetch ) attachments_to_download = result.get("attachments") if not attachments_to_download: return None return get_attachments_content(attachments_to_download, is_fetch=is_fetch) def get_attachments_info(id_type, object_id, attachment_type, business_object_type_name=None, business_object_type_id=None): type = "File" result = get_attachments_details( id_type, object_id, business_object_type_name, business_object_type_id, type, attachment_type ) attachments = result.get("attachments") attachments_info = [ { "AttachmentFiledId": attachment.get("attachmentFileId"), "FileName": attachment.get("displayText"), "AttachmentId": attachment.get("attachmentId"), "BusinessObjectType": business_object_type_name, f"BusinessObject{string_to_context_key(id_type)}": object_id, } for attachment in attachments ] return attachments_info, result def attachment_results(attachments): attachments_file_results = [] for attachment in attachments: attachment_content = attachment.get("Content") attachment_name = attachment.get("FileName") attachments_file_results.append(fileResult(attachment_name, attachment_content)) return attachments_file_results def run_query_on_business_objects(bus_id, filter_query, max_results, is_fetch): payload = {"busObId": bus_id, "includeAllFields": True, "filters": filter_query} if max_results: payload["pageSize"] = max_results return get_search_results(payload, is_fetch=is_fetch) def get_key_value_dict_from_template(key, val, business_object_id, is_fetch=False): template_dict = get_business_object_template(business_object_id, is_fetch=is_fetch) return cherwell_dict_parser(key, val, template_dict.get("fields")) def get_all_incidents(objects_names, last_created_time, max_results, query_string, real_fetch): all_incidents: list = [] for business_object_name in objects_names: business_object_id = resolve_business_object_id_by_name(business_object_name, is_fetch=real_fetch) query_list = [["CreatedDateTime", "gt", last_created_time]] if query_string: additional_query_list = validate_query_for_fetch_incidents(objects_names, query_string, real_fetch) query_list += additional_query_list incidents, _ = query_business_object(query_list, business_object_id, max_results, is_fetch=real_fetch) all_incidents += incidents sorted_incidents = sorted(all_incidents, key=lambda incident: incident.get("CreatedDateTime")) return sorted_incidents[:max_results] def object_to_incident(obj): attachments_list = [] attachments = obj.get("Attachments") if attachments: obj.pop("Attachments") for attachment in attachments: file_name = attachment.get("FileName") attachment_file = fileResult(file_name, attachment.get("Content")) attachments_list.append({"path": attachment_file.get("FileID"), "name": file_name}) item = {"name": f'Record ID:{obj.get("RecID")}', "attachment": attachments_list, "rawJSON": json.dumps(obj)} return createContext(item, removeNull=True) def save_incidents(objects_to_save): final_incidents = [] for obj in objects_to_save: final_incidents.append(object_to_incident(obj)) demisto.incidents(final_incidents) def fetch_incidents_attachments(incidents, is_fetch): for incident in incidents: rec_id = incident.get("RecID") business_object_id = incident.get("BusinessObjectId") incident["Attachments"] = [] attachments = download_attachments("record_id", rec_id, business_object_type_id=business_object_id, is_fetch=is_fetch) if attachments: for attachment in attachments: new_attachment_obj = {"Content": attachment.get("Content"), "FileName": attachment.get("FileName")} incident["Attachments"].append(new_attachment_obj) return incidents def validate_params_for_fetch(max_result, objects_to_fetch, real_fetch): # Check that max result is positive integer try: max_result = int(max_result) if max_result < 0: raise ValueError except ValueError: max_result_err_message = "Max results to fetch must be a number grater than 0" raise_or_return_error(max_result_err_message, real_fetch) # Make sure that there are objects to fetch if len(objects_to_fetch) == 0: objects_to_fetch_err_message = "No objects to fetch were given" raise_or_return_error(objects_to_fetch_err_message, real_fetch) def fetch_incidents(objects_names, fetch_time, max_results, query_string, fetch_attachments, real_fetch=False): validate_params_for_fetch(max_results, objects_names, real_fetch) max_results = int(max_results) last_run = demisto.getLastRun() last_objects_fetched = last_run.get("objects_names_to_fetch") if "last_created_time" in last_run and last_objects_fetched == objects_names: last_created_time = last_run.get("last_created_time") else: try: last_created_time, _ = parse_date_range(fetch_time, date_format=DATE_FORMAT, to_timestamp=False) except ValueError: error_message = ( f"First fetch time stamp should be of the form: <number> <time unit>, e.g., 12 hours, " f'7 days. Received: "{fetch_time}"' ) raise_or_return_error(error_message, real_fetch) incidents = get_all_incidents(objects_names, last_created_time, max_results, query_string, real_fetch) if fetch_attachments: incidents = fetch_incidents_attachments(incidents, real_fetch) if real_fetch: save_incidents(incidents) return incidents def upload_business_object_attachment( file_name, file_size, file_content, object_type_name, id_type, object_id, ): id_type_str = "publicid" if id_type == "public_id" else "busobrecid" url = ( BASE_URL + f"/api/V1/uploadbusinessobjectattachment/" f"filename/{file_name}/busobname/{object_type_name}/{id_type_str}/{object_id}/offset/0/totalsize/{file_size}" ) payload = file_content headers = HEADERS headers["Content-Type"] = "application/octet-stream" response = make_request("POST", url, payload, headers) return parse_response(response, f"Could not upload attachment {file_name}") def upload_attachment(id_type, object_id, type_name, file_entry_id): file_data = demisto.getFilePath(file_entry_id) file_path = file_data.get("path") file_name = file_data.get("name") try: file_size = os.path.getsize(file_path) with open(file_path, "rb") as f: file_content = f.read() attachment_id = upload_business_object_attachment(file_name, file_size, file_content, type_name, id_type, object_id) return attachment_id except Exception as err: return_error(f"unable to open file: {err}") def remove_attachment(id_type, object_id, type_name, attachment_id): id_type_str = "publicid" if id_type == "public_id" else "busobrecid" url = ( BASE_URL + f"/api/V1/removebusinessobjectattachment/" f"attachmentid/{attachment_id}/busobname/{type_name}/{id_type_str}/{object_id}" ) response = make_request("DELETE", url) parse_response(response, f"Could not remove attachment {attachment_id} from {type_name} {object_id}") def link_related_business_objects( action, parent_business_object_id, parent_business_object_record_id, relationship_id, business_object_id, business_object_record_id, ): url_action_str = "linkrelatedbusinessobject" if action == "link" else "unlinkrelatedbusinessobject" url = ( BASE_URL + f"api/V1/{url_action_str}/parentbusobid/{parent_business_object_id}" f"/parentbusobrecid/{parent_business_object_record_id}" f"/relationshipid/{relationship_id}" f"/busobid/{business_object_id}" f"/busobrecid/{business_object_record_id}" ) http_method = "GET" if action == "link" else "DELETE" response = make_request(http_method, url) parse_response(response, "Could not link business objects") def business_objects_relation_action( action, parent_type_name, parent_record_id, child_type_name, child_record_id, relationship_id ): parent_business_object_id = resolve_business_object_id_by_name(parent_type_name) child_business_object_id = resolve_business_object_id_by_name(child_type_name) link_related_business_objects( action, parent_business_object_id, parent_record_id, relationship_id, child_business_object_id, child_record_id ) def validate_query_list(query_list, is_fetch): for index, query in enumerate(query_list): if len(query) != 3: length_err_message = ( f'Cannot parse query, should be of the form: `[["FieldName","Operator","Value"],' f'["FieldName","Operator","Value"],...]`. Filter in index {index} is malformed: {query}' ) raise_or_return_error(length_err_message, is_fetch) if query[1] not in QUERY_OPERATORS: operator_err_message = ( f'Operator should be one of the following: {", ".join(QUERY_OPERATORS)}. Filter in' f' index {index}, was: {query[1]}' ) raise_or_return_error(operator_err_message, is_fetch) def validate_query_for_fetch_incidents(objects_names, query_string, real_fetch): if not objects_names: no_objects_err_message = ( "No business object name was given. \n In order to run advanced query, " "fill the integration parameter-`Objects to fetch` with exactly one business object name." ) raise_or_return_error(no_objects_err_message, real_fetch) if len(objects_names) > 1: multiple_objects_error_message = ( f'Advanced query operation is supported for a single business object. ' f'{len(objects_names)} objects were given: {",".join(objects_names)}' ) raise_or_return_error(multiple_objects_error_message, real_fetch) return parse_string_query_to_list(query_string, real_fetch) def build_query_dict(query, filed_ids_dict, is_fetch): field_name = query[0] operator = query[1] value = query[2] field_id = filed_ids_dict.get(field_name) if not field_id: err_message = f"Field name: {field_name} does not exit in the given business objects" raise_or_return_error(err_message, is_fetch) return {"fieldId": filed_ids_dict.get(field_name), "operator": operator, "value": value} def build_query_dict_list(query_list, filed_ids_dict, is_fetch): query_dict_list = [] for query in query_list: query_dict = build_query_dict(query, filed_ids_dict, is_fetch) query_dict_list.append(query_dict) return query_dict_list def query_business_object(query_list, business_object_id, max_results, is_fetch=False): filed_ids_dict = get_key_value_dict_from_template("name", "fieldId", business_object_id, is_fetch=is_fetch) filters = build_query_dict_list(query_list, filed_ids_dict, is_fetch=is_fetch) query_result = run_query_on_business_objects(business_object_id, filters, max_results, is_fetch=is_fetch) business_objects = parse_fields_from_business_object_list(query_result) return business_objects, query_result def parse_string_query_to_list(query_string, is_fetch=False): try: query_list = json.loads(query_string) except (ValueError, TypeError): err_message = ( 'Cannot parse query, should be of the form: `[["FieldName","Operator","Value"],["FieldName","Operator","Value"]]`.' ) raise_or_return_error(err_message, is_fetch) validate_query_list(query_list, is_fetch) return query_list def query_business_object_string(business_object_name, query_string, max_results): if max_results: try: int(max_results) except ValueError: return return_error("`max_results` argument received is not a number") business_object_id = resolve_business_object_id_by_name(business_object_name) query_filters_list = parse_string_query_to_list(query_string) return query_business_object(query_filters_list, business_object_id, max_results) def get_field_info(type, field_property): business_object_id = resolve_business_object_id_by_name(type) template = get_business_object_template(business_object_id) business_object_fields = template.get("fields") field_to_return = None for field in business_object_fields: if ( field.get("displayName") == field_property or field.get("fieldId") == field_property or field.get("name") == field_property ): field_to_return = field if field_to_return: field_to_return = { "DisplayName": field_to_return.get("displayName"), "Name": field_to_return.get("name"), "FieldId": field_to_return.get("fieldId"), } else: return_error(f"Field with the value {field_property} was not found") return field_to_return def cherwell_run_saved_search(association_id, scope, scope_owner, search_name): search_payload = { "Association": association_id, "scope": scope, "scopeOwner": scope_owner, "searchName": search_name, "includeAllFields": True, } results = get_search_results(search_payload) return parse_fields_from_business_object_list(results) def cherwell_get_business_object_id(business_object_name): business_object_id = resolve_business_object_id_by_name(business_object_name) business_object_info = {"BusinessObjectId": business_object_id, "BusinessObjectName": business_object_name} return business_object_info def raise_or_return_error(msg, raise_flag): """ This function handles errors occurred in functions that are within the fetch incidents flow. If the error occurred as part of a fetch-incidents flow then an exception will be thrown otherwise a regular error entry will be returned. This is needed when running fetch-incidents process since regular error entries are not handled correctly by the server :param msg: error msg to raise/return :param raise_flag: if true should raise, otherwise throw """ if raise_flag: raise Exception(msg) else: return_error(msg) def get_one_step_actions(bus_id, is_fetch=False): url = BASE_URL + f"api/V1/getonestepactions/association/{bus_id}" response = make_request("GET", url, is_fetch=is_fetch) return parse_response(response, "Could not get one step actions", is_fetch=is_fetch) def get_one_step_actions_recursive(root, actions): if root.get("childItems"): actions_list = [] for item in root.get("childItems"): actions_list.append(item) actions[root.get("name")] = actions_list for folder in root.get("childFolders", []): get_one_step_actions_recursive(folder, actions) return actions def run_one_step_action(payload): url = BASE_URL + "api/V1/runonestepaction" response = make_request("POST", url, json.dumps(payload)) return parse_response(response, "Could not run one step action") ######################################################################################################################## """ Commands """ def test_command(): if FETCHES_INCIDENTS: fetch_incidents(OBJECTS_TO_FETCH, FETCH_TIME, MAX_RESULT, QUERY_STRING, FETCH_ATTACHMENTS) else: get_access_token(True) def create_business_object_command(): args = demisto.args() type_name = args.get("type") data_json = json.loads(args.get("json")) result = create_business_object(type_name, data_json) ids = {"PublicId": result.get("busObPublicId"), "RecordId": result.get("busObRecId")} md = tableToMarkdown(f"New {type_name.capitalize()} was created", ids, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["json"], "Contents": result, "HumanReadable": md, "EntryContext": {"Cherwell.BusinessObjects(val.RecordId == obj.RecordId)": ids}, } def update_business_object_command(): args = demisto.args() type_name = args.get("type") data_json = json.loads(args.get("json")) object_id = args.get("id_value") id_type = args.get("id_type") result = update_business_object(type_name, data_json, object_id, id_type) ids = {"PublicId": result.get("busObPublicId"), "RecordId": result.get("busObRecId")} md = tableToMarkdown(f"{type_name.capitalize()} {object_id} was updated", ids, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["json"], "Contents": result, "HumanReadable": md, "EntryContext": {"Cherwell.BusinessObjects(val.RecordId == obj.RecordId)": ids}, } def get_business_object_command(): args = demisto.args() type_name = args.get("type") id_type = args.get("id_type") object_id = args.get("id_value") business_object, results = get_business_object(type_name, object_id, id_type) md = tableToMarkdown(f"{type_name.capitalize()}: {object_id}", business_object, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["json"], "Contents": results, "HumanReadable": md, "EntryContext": {"Cherwell.BusinessObjects(val.RecordId == obj.RecordId)": createContext(business_object)}, } def delete_business_object_command(): args = demisto.args() type_name = args.get("type") id_type = args.get("id_type") object_id = args.get("id_value") results = delete_business_object(type_name, object_id, id_type) md = f"### Record {object_id} of type {type_name} was deleted." return {"Type": entryTypes["note"], "ContentsFormat": formats["json"], "Contents": results, "HumanReadable": md} def fetch_incidents_command(): objects_names_to_fetch = OBJECTS_TO_FETCH fetch_attachments = FETCH_ATTACHMENTS max_result = MAX_RESULT fetch_time = FETCH_TIME query_string = QUERY_STRING incidents = fetch_incidents(objects_names_to_fetch, fetch_time, max_result, query_string, fetch_attachments, real_fetch=True) if incidents: last_incident_created_time = incidents[-1].get("CreatedDateTime") next_created_time_to_fetch = (datetime.strptime(last_incident_created_time, DATE_FORMAT) + timedelta(seconds=1)).strftime( DATE_FORMAT ) demisto.setLastRun({"last_created_time": next_created_time_to_fetch, "objects_names_to_fetch": objects_names_to_fetch}) def download_attachments_command(): args = demisto.args() id_type = args.get("id_type") object_id = args.get("id_value") type_name = args.get("type") attachments = download_attachments(id_type, object_id, business_object_type_name=type_name) if not attachments: return_error(f"No attachments were found for {type_name}:{object_id}") return attachment_results(attachments) def upload_attachment_command(): args = demisto.args() id_type = args.get("id_type") object_id = args.get("id_value") type_name = args.get("type") file_entry_id = args.get("file_entry_id") attachment_id = upload_attachment(id_type, object_id, type_name, file_entry_id) entry_context = { "AttachmentFileId": attachment_id, "BusinessObjectType": type_name, string_to_context_key(id_type): object_id, } md = f"### Attachment: {attachment_id}, was successfully attached to {type_name} {object_id}" return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": {"attachment_id": attachment_id}, "EntryContext": {"Cherwell.UploadedAttachments(val.AttachmentId == obj.AttachmentId)": entry_context}, "HumanReadable": md, } def remove_attachment_command(): args = demisto.args() id_type = args.get("id_type") object_id = args.get("id_value") type_name = args.get("type") attachment_id = args.get("attachment_id") remove_attachment(id_type, object_id, type_name, attachment_id) md = f"### Attachment: {attachment_id}, was successfully removed from {type_name} {object_id}" return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": md, "HumanReadable": md, } def get_attachments_info_command(): args = demisto.args() id_type = args.get("id_type") object_id = args.get("id_value") type_name = args.get("type") attachment_type = args.get("attachment_type") attachments_info, raw_result = get_attachments_info(id_type, object_id, attachment_type, business_object_type_name=type_name) md = ( tableToMarkdown(f"{type_name.capitalize()} {object_id} attachments:", attachments_info, headerTransform=pascalToSpace) if attachments_info else f"### {type_name.capitalize()} {object_id} has no attachments" ) entry = {"Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": raw_result, "HumanReadable": md} if attachments_info: entry["EntryContext"] = {"Cherwell.AttachmentsInfo": attachments_info} return entry def link_business_objects_command(): args = demisto.args() parent_type = args.get("parent_type") parent_record_id = args.get("parent_record_id") child_type = args.get("child_type") child_record_id = args.get("child_record_id") relationship_id = args.get("relationship_id") business_objects_relation_action("link", parent_type, parent_record_id, child_type, child_record_id, relationship_id) message = f"{parent_type.capitalize()} {parent_record_id} and {child_type.capitalize()} {child_record_id} were linked" md = f"### {message}" return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": message, "HumanReadable": md, } def unlink_business_objects_command(): args = demisto.args() parent_type = args.get("parent_type") parent_record_id = args.get("parent_record_id") child_type = args.get("child_type") child_record_id = args.get("child_record_id") relationship_id = args.get("relationship_id") business_objects_relation_action("unlink", parent_type, parent_record_id, child_type, child_record_id, relationship_id) message = f"{parent_type.capitalize()} {parent_record_id} and {child_type.capitalize()} {child_record_id} were unlinked" md = f"### {message}" return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": message, "HumanReadable": md, } def query_business_object_command(): args = demisto.args() type_name = args.get("type") query_string = args.get("query") max_results = args.get("max_results") results, raw_response = query_business_object_string(type_name, query_string, max_results) md = tableToMarkdown("Query Results", results, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": raw_response, "EntryContext": {"Cherwell.QueryResults": results}, "HumanReadable": md, } def get_field_info_command(): args = demisto.args() type_name = args.get("type") field_property = args.get("field_property") results = get_field_info(type_name, field_property) md = tableToMarkdown("Field info:", results, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": results, "EntryContext": {"Cherwell.FieldInfo(val.FieldId == obj.FieldId)": results}, "HumanReadable": md, } def cherwell_run_saved_search_command(): args = demisto.args() association_id = args.get("association_id") scope = args.get("scope") scope_owner = args.get("scope_owner") search_name = args.get("search_name") results = cherwell_run_saved_search(association_id, scope, scope_owner, search_name) md = tableToMarkdown(f"{search_name} results:", results, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": results, "EntryContext": {"Cherwell.SearchOperation(val.RecordId == obj.RecordId)": results}, "HumanReadable": md, } def cherwell_get_business_object_id_command(): args = demisto.args() business_object_name = args.get("business_object_name") result = cherwell_get_business_object_id(business_object_name) md = tableToMarkdown("Business Object Info:", result, headerTransform=pascalToSpace) return { "Type": entryTypes["note"], "ContentsFormat": formats["text"], "Contents": result, "EntryContext": {"Cherwell.BusinessObjectInfo(val.BusinessObjectId == obj.BusinessObjectId)": result}, "HumanReadable": md, } def cherwell_get_business_object_summary_command(): args = demisto.args() business_object_name = args.get("name") business_object_id = args.get("id") if not business_object_id and not business_object_name: raise DemistoException("No name or ID were specified. Please specify at least one of them.") elif business_object_id: result = get_business_object_summary_by_id(business_object_id) else: result = get_business_object_summary_by_name(business_object_name) md = tableToMarkdown("Business Object Summary:", result, headerTransform=pascalToSpace) return CommandResults( outputs=result, readable_output=md, outputs_key_field="busObId", outputs_prefix="Cherwell.BusinessObjectSummary", raw_response=result, ) def cherwell_get_one_step_actions_command(): args = demisto.args() business_object_id = args.get("busobjectid") result = get_one_step_actions(business_object_id) actions: dict = {} ec = {} md = "" get_one_step_actions_recursive(result.get("root"), actions) if actions: for key, action in actions.items(): md += tableToMarkdown( f"{key} one-step actions:", action, headerTransform=pascalToSpace, headers=ONE_STEP_ACTION_HEADERS ) ec = {"BusinessObjectId": business_object_id, "Actions": actions} else: md = f"No one-step actions found for business object ID {business_object_id}" return CommandResults( outputs=ec, readable_output=md, outputs_key_field="BusinessObjectId", outputs_prefix="Cherwell.OneStepActions", raw_response=result, ) def cherwell_run_one_step_action_command(): prompt_values = {} args = demisto.args() business_object_id = args.get("busobjectid") rec_id = args.get("busobrecid") stand_in_key = args.get("oneStepAction_StandInKey") prompt_values_arg = args.get("prompt_values") if prompt_values_arg: prompt_values = json.loads(prompt_values_arg) payload = { "acquireLicense": True, "busObId": business_object_id, "busObRecId": rec_id, "oneStepActionStandInKey": stand_in_key, "promptValues": prompt_values, } result = run_one_step_action(payload) return CommandResults(readable_output="One-Step action has been executed successfully.", raw_response=result) ####################################################################################################################### def main(): global \ FETCHES_INCIDENTS, \ FETCH_TIME, \ FETCH_ATTACHMENTS, \ OBJECTS_TO_FETCH, \ MAX_RESULT, \ USERNAME, \ PASSWORD, \ SERVER, \ SECURED, \ CLIENT_ID, \ QUERY_STRING, \ DATE_FORMAT, \ BASE_URL params = demisto.params() FETCHES_INCIDENTS = params.get("isFetch") FETCH_TIME = params.get("fetch_time") FETCH_ATTACHMENTS = params.get("fetch_attachments") OBJECTS_TO_FETCH = params.get("objects_to_fetch").split(",") MAX_RESULT = params.get("max_results") USERNAME = params.get("credentials").get("identifier") PASSWORD = params.get("credentials").get("password") # Remove trailing slash to prevent wrong URL path to service SERVER = params["url"][:-1] if (params["url"] and params["url"].endswith("/")) else params["url"] SECURED = not params.get("insecure") CLIENT_ID = params.get("client_id") QUERY_STRING = params.get("query_string") DATE_FORMAT = "%m/%d/%Y %I:%M:%S %p" # Service base URL BASE_URL = SERVER + "/CherwellAPI/" try: handle_proxy() command = demisto.command() demisto.debug(f"Command being called is {command}") commands = { "cherwell-create-business-object": create_business_object_command, "cherwell-update-business-object": update_business_object_command, "cherwell-get-business-object": get_business_object_command, "cherwell-delete-business-object": delete_business_object_command, "cherwell-download-attachments": download_attachments_command, "cherwell-get-attachments-info": get_attachments_info_command, "cherwell-upload-attachment": upload_attachment_command, "cherwell-remove-attachment": remove_attachment_command, "cherwell-link-business-objects": link_business_objects_command, "cherwell-unlink-business-objects": unlink_business_objects_command, "cherwell-query-business-object": query_business_object_command, "cherwell-get-field-info": get_field_info_command, "cherwell-run-saved-search": cherwell_run_saved_search_command, "cherwell-get-business-object-id": cherwell_get_business_object_id_command, "cherwell-get-business-object-summary": cherwell_get_business_object_summary_command, "cherwell-get-one-step-actions-for-business-object": cherwell_get_one_step_actions_command, "cherwell-run-one-step-action-on-business-object": cherwell_run_one_step_action_command, } if command == "test-module": test_command() demisto.results("ok") elif command == "fetch-incidents": fetch_incidents_command() elif command in commands: return_results(commands[command]()) else: raise NotImplementedError(f"{command} command is not implemented.") # Log exceptions except Exception as e: message = f"Unexpected error: {e}." return_error(message, error=traceback.format_exc()) if __name__ in ["__main__", "builtin", "builtins"]: main()