Convert JSON result to CSV and ADD csv file as attachment on the case wall
Solved
Convert JSON result to CSV and ADD csv file as attachment on the case wall
+14- Silver 2
Best answer by VictorSOAR
i had build custom action to convert json to csv then i encode csv to base64 and finally passed base64 blob as input to attachment action from fileutils
Hi @vanitharaj1208 ,
I had also created a playbook to convert json to csv and attaching csv file to case wall as below:
1. Used 'CSV - Save Json To CSV' to get the json object in csv file. This action is available in CSV integration from marketplace.
2. Used 'FileUtilities - Get Files as Base64' action to convert this csv file to base64 strings.
3. Used 'FileUtilities - Add Attachment' action and provided base64 blob of 'FileUtilities - Get Files as Base64 json results' and in Type provided .csv file type to attach csv file to case wall.
+10Have you tried the Save JSON to CSV action (https://cloud.google.com/chronicle/docs/soar/marketplace-integrations/csv#save_json_to_csv) and the Add Attachment action (https://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/file-utilities#add-attachment)?
+14- Silver 2
i had build custom action to convert json to csv then i encode csv to base64 and finally passed base64 blob as input to attachment action from fileutils
+14- Silver 2
Have you tried the Save JSON to CSV action (https://cloud.google.com/chronicle/docs/soar/marketplace-integrations/csv#save_json_to_csv) and the Add Attachment action (https://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/file-utilities#add-attachment)?
i tired with same solution, how to i access that file location where does it store ..../tmp/filename
did u try ?
+6- Bronze 1
- Answer
i had build custom action to convert json to csv then i encode csv to base64 and finally passed base64 blob as input to attachment action from fileutils
Hi @vanitharaj1208 ,
I had also created a playbook to convert json to csv and attaching csv file to case wall as below:
1. Used 'CSV - Save Json To CSV' to get the json object in csv file. This action is available in CSV integration from marketplace.
2. Used 'FileUtilities - Get Files as Base64' action to convert this csv file to base64 strings.
3. Used 'FileUtilities - Add Attachment' action and provided base64 blob of 'FileUtilities - Get Files as Base64 json results' and in Type provided .csv file type to attach csv file to case wall.
+14- Silver 2
Hi @vanitharaj1208 ,
I had also created a playbook to convert json to csv and attaching csv file to case wall as below:
1. Used 'CSV - Save Json To CSV' to get the json object in csv file. This action is available in CSV integration from marketplace.
2. Used 'FileUtilities - Get Files as Base64' action to convert this csv file to base64 strings.
3. Used 'FileUtilities - Add Attachment' action and provided base64 blob of 'FileUtilities - Get Files as Base64 json results' and in Type provided .csv file type to attach csv file to case wall.
Ill Check and Reply ... Thank you
+14- Silver 2
Hi @vanitharaj1208 ,
I had also created a playbook to convert json to csv and attaching csv file to case wall as below:
1. Used 'CSV - Save Json To CSV' to get the json object in csv file. This action is available in CSV integration from marketplace.
2. Used 'FileUtilities - Get Files as Base64' action to convert this csv file to base64 strings.
3. Used 'FileUtilities - Add Attachment' action and provided base64 blob of 'FileUtilities - Get Files as Base64 json results' and in Type provided .csv file type to attach csv file to case wall.
It working and i have tested.
+2- Bronze 1
single as of now
Has this ever been updated to work with multiple JSON results?
Did you ever figure out where the file location is (/tmp/filename)? I want to use the CSV Search by String action but unsure what the CSV Path should be
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.