Skip to main content
Solved

Export Case Wall Activity (Actions / Comments) from Google SecOps

  • March 5, 2026
  • 6 replies
  • 99 views

Dome
Forum|alt.badge.img+4

 

Hello everyone,

 

I need some help regarding Google SecOps Case Management.

 

In the Case Wall, we can see all activities related to a case such as actions taken, comments, status changes, tasks , and other events that happened during the life-cycle of the case. I would like to know if there is a way to export or extract the Case Wall activity into a table format or CSV file.

Our team focus to review response time of each assigned case and what happen to that case. 

 

Any suggestions or guidance would be greatly appreciated.

Thank you.

Best answer by Dome

Feature requested <3

6 replies

cmorris
Staff
Forum|alt.badge.img+12
  • Staff
  • March 5, 2026

Get Case Data will return information about the case to include Wall Data:

Try using that followed by a Save JSON to CSV action from the CSV integration.


Dome
Forum|alt.badge.img+4
  • Author
  • Bronze 1
  • March 6, 2026

Thank you for the information. I will investigate this further.


Dome
Forum|alt.badge.img+4
  • Author
  • Bronze 1
  • March 6, 2026

Is there any way I can query using YARA-L to get Case Wall data as a table? So i can do a dashboard with YALA-L.


hzmndt
Staff
Forum|alt.badge.img+11
  • Staff
  • March 6, 2026

@Dome  you can use dashboard today with YARA-L to query case related data.

For example - case.wall_activities


Dome
Forum|alt.badge.img+4
  • Author
  • Bronze 1
  • March 9, 2026

@Dome  you can use dashboard today with YARA-L to query case related data.

For example - case.wall_activities

From my query, the data is displayed in HTML and cannot be easily read. Is there any way to retrieve the content in a more readable format?

 


Dome
Forum|alt.badge.img+4
  • Author
  • Bronze 1
  • Answer
  • April 7, 2026

Feature requested <3