IbmAddTask
Use this script to add a task to an IBM QRadar SOAR incident.
- Type
- python
- Pack
- IBMResilientSystems
Source
import demistomock as demisto # noqa: F401
from CommonServerPython import * # noqa: F401
def add_task(args: Dict[str, Any]) -> CommandResults:
remote_incident_id = demisto.incident()["dbotMirrorId"]
demisto.debug(f"add_task {args=} | {remote_incident_id=}")
# Updating arguments according to expected command arguments.
tags = argToList(args.pop("tags", ""))
args["incident_id"] = remote_incident_id
response = demisto.executeCommand("rs-add-custom-task", args)
demisto.debug(f"add_task {response=}")
table_name = (
response[0]["HumanReadable"]
if (isinstance(response, list) and len(response) > 0 and response[0]["HumanReadable"])
else "New task created"
)
readable_output = tableToMarkdown(
table_name,
{
"Name": args.get("name"),
"Phase": args.get("phase"),
"Due date": args.get("due_date"),
"Description": args.get("description"),
"Instructions": args.get("instructions"),
},
)
return CommandResults(readable_output=readable_output, mark_as_note=False, tags=tags or None)
def main(): # pragma: no cover
try:
res = add_task(demisto.args())
return_results(res)
except Exception as ex:
return_error(f"Failed to execute IbmAddTask. Error: {ex!s}")
if __name__ in ["__builtin__", "builtins", "__main__"]:
main()
README
Use this script to add a task to an IBM QRadar SOAR incident.
Script Data
| Name | Description |
|---|---|
| Script Type | python3 |
| Cortex XSOAR Version | 6.8.0 |
Dependencies
This script uses the following commands and scripts.
- IBM Resilient Systems
- rs-add-custom-task
Inputs
| Argument Name | Description |
|---|---|
| name | Task name. |
| description | Task description. |
| instructions | Textual instructions for the task. This will override the default instructions for the task. |
| due_date | Task due date in ISO format e.g., “2020-02-02T19:00:00Z. Empty date indicates that the task has no assigned due date. |
| owner_id | The owner of the task (ID or name as appears in IBM QRadar SOAR). Leave empty if the task has no owner. |
| phase | Task to be added to the IBM QRadar incident. |
Outputs
There are no outputs for this script.