Hi all,
How can we identify failed jobs in Google SecOps SOAR? How can we get automatically notified—for example, by email or API webhook—when a job or playbook execution fails?
Does the SecOps API provide an endpoint I can query to retrieve a list of failed jobs from a specific time range?
Thanks!
Solved
How to Monitor and Receive Notifications for Failed Google SecOps SOAR Jobs?
+3- Bronze 4
Best answer by AymanC
Hi
The following docs may be of interest:
REST Resource: projects.locations.instances.integrations | Google Security Operations | Google Cloud
Method: jobInstances.list | Google Security Operations | Google Cloud
Kind Regards,
Ayman
+14- Bronze 5
- Answer
Hi
The following docs may be of interest:
REST Resource: projects.locations.instances.integrations | Google Security Operations | Google Cloud
Method: jobInstances.list | Google Security Operations | Google Cloud
Kind Regards,
Ayman
You may wish to apply for this preview feature - https://docs.cloud.google.com/chronicle/docs/soar/investigate/collecting-soar-logs
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.