Time in FortiSOAR - Arrow Jinja expressions

dspille · 10-07-2022

FortiSOAR uses the python arrow library to assist with dynamically rendering time. Common uses are setting the current time to be used in a field, shifting time backwards for data ingestion, or to be used in API's (The joy of working with different a...

dspille · 09-23-2024

Hey @JoseOjeb , I have found the issue in the jinja. The issue is the spaces that are around the {{(Severity ... }} expressions. One quick solution is removing the spaces, another is adding in whitespace trim expressions to the if statements to remov...

dspille · 09-20-2024

Hello @JoseOjeb , Try this instead {%if vars.input.records[0].fileHash=="839765b93416bb945be4f4ef2804158f"%} {{("Severity" | picklist("Critical", "@id"))}} {% else %} {{("Severity" | picklist("Medium", "@id"))}} {% endif %} The difference here is in ...

dspille · 07-25-2024

You can do this using a code snippet step in a playbook. Here is a sample playbook that converts json to xml

dspille · 05-13-2024

This should be pretty easy to do if you have an associated indicator record for the IP's you're blocking. Whenever you block an IP, the status field can be set to "Blocked". Then you can create a report of all IP's blocked within the past day.

dspille · 04-12-2024

Hey @ereta , the issue you're encountering here is due to fact that Attachment records are different than File records in FortiSOAR. Attachments is module that uses the Files module for storing files. The action you're using is asking for the File @i...

User Statistics

User Activity