FortiSOAR uses the python arrow library to assist with dynamically
rendering time. Common uses are setting the current time to be used in a
field, shifting time backwards for data ingestion, or to be used in
API's (The joy of working with different a<!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- --><!-- -->...
This should be pretty easy to do if you have an associated indicator
record for the IP's you're blocking. Whenever you block an IP, the
status field can be set to "Blocked". Then you can create a report of
all IP's blocked within the past day.
Hey @ereta , the issue you're encountering here is due to fact that
Attachment records are different than File records in FortiSOAR.
Attachments is module that uses the Files module for storing files. The
action you're using is asking for the File @i...
Hey Adem, How you fix the disk space will depend on the way you've
allocated the disks to the vm. How have you deployed the instance ( ie
OVA, AWS, qcow, docker, cli) ? Can you also send the output of these 4
commands (some may require sudo): lsblk d...
Hey Craig, The issue here based on the info provided seems to be that
vars.input.records[0].pattern is a string. Your jinja - {% if
item['network-traffic:dst_ref']['type'] == 'ipv4-addr' %} is treating
the pattern as if it were a dictionary. Since yo<!-- -->...