FortiSOAR uses the python arrow library to assist with dynamically
rendering time. Common uses are setting the current time to be used in a
field, shifting time backwards for data ingestion, or to be used in
API's (The joy of working with different a<!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- -->...
Hey @JoseOjeb , I have found the issue in the jinja. The issue is the
spaces that are around the {<!-- -->{(Severity ... }} expressions. One quick
solution is removing the spaces, another is adding in whitespace trim
expressions to the if statements to remov<!-- --><!-- --><!-- --><!-- -->...
This should be pretty easy to do if you have an associated indicator
record for the IP's you're blocking. Whenever you block an IP, the
status field can be set to "Blocked". Then you can create a report of
all IP's blocked within the past day.
Hey @ereta , the issue you're encountering here is due to fact that
Attachment records are different than File records in FortiSOAR.
Attachments is module that uses the Files module for storing files. The
action you're using is asking for the File @i...
