Skip to main content

Chronicle SOAR > Jobs Scheduler > Close Cases Based On Search

  • October 12, 2024
  • 6 replies
  • 86 views

AfvanJaffer
Forum|alt.badge.img+5

hello folks!

Hope you guys are doing good. 

playing with the Jobs scheduler especially on the Close Cases Based On Search Tool, 

working on it, I realized there is two mandatory input fields on them.

mandatory ones are  - Siemplify Username, Password 

I'm wondering where should I get this credential - from the google support folks ?

Thanks!

6 replies

BrianK
Staff
Forum|alt.badge.img+5
  • Staff
  • October 16, 2024

Hello, this currently supports local username and password from the SOAR.  So would be from within the SOAR settings user management. 


AfvanJaffer
Forum|alt.badge.img+5
  • Author
  • Bronze 5
  • January 16, 2025

Hello, this currently supports local username and password from the SOAR.  So would be from within the SOAR settings user management. 


we are managing the chronicle SIEM + SOAR using the GCP project, so no accounts can be created with a username and password. 

is there any alternative options ?


AfvanJaffer
Forum|alt.badge.img+5
  • Author
  • Bronze 5
  • January 17, 2025

BrianK
Staff
Forum|alt.badge.img+5
  • Staff
  • January 21, 2025

@BrianK ..


Currently this is the only method.


Forum|alt.badge.img+1
  • New Member
  • May 21, 2025

@BrianK any update on how this Job can be supported when identities are managed by GCP IAM?

@AfvanJaffer did you find a workaround or alternative method?


Forum|alt.badge.img+1
  • New Member
  • June 4, 2025

For anyone encountering the same use case, I created a custom job from the "Tag Untouched Cases" Tools job template (which seems to handle auth natively) and made use of the following Siemplify Module functions to produce the periodic search and case closure required: