Hi all,
How can we identify failed jobs in Google SecOps SOAR? How can we get automatically notified—for example, by email or API webhook—when a job or playbook execution fails?
Does the SecOps API provide an endpoint I can query to retrieve a list of failed jobs from a specific time range?
Thanks!
Question
How to Monitor and Receive Notifications for Failed Google SecOps SOAR Jobs?
+2- Bronze 3
+13- Bronze 5
Hi
The following docs may be of interest:
REST Resource: projects.locations.instances.integrations | Google Security Operations | Google Cloud
Method: jobInstances.list | Google Security Operations | Google Cloud
Kind Regards,
Ayman
+11You may wish to apply for this preview feature - https://docs.cloud.google.com/chronicle/docs/soar/investigate/collecting-soar-logs
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.