Skip to main content

Google Security Operations

Your Security Operations conversation starts here. Ask questions. Share insights. Tell us what you've learned. Or tell us what you're working on. We want to hear about it!

  • 2,071 Topics
  • 6,579 Replies
2071 Topics
M
Marcel3New Member
posted in Google Security Operations
The difference between the integrations

Can someone explain to me what the differences between ElasticSearchV7 and ElasticSearch Integration are and why I should choose one over the other?

04
M
N
Nianhua_LiNew Member
posted in Google Security Operations
Trigger a playbook from a Job

Hi Community, is it possible to trigger a playbook from a Job? I would like to use Siemplify to collect information from various Integrations and send all these data via email on daily basis. A playbook fits best, because it allows me to call Actions from different Integrations. But I don't want to create case. Is there a way to trigger playbook without a case? Many thanks in advance for any suggestions you may have!

03
Y
T
TomtomfridmanNew Member
posted in Google Security Operations
Error when I used a domain to host Siemplify on port 443

This post was originally sent by Roshaan Tariq Hi Guys, I'm getting this error, when I used a domain to host Siemplify on port 443. Any solutions? STDOUT: STDERR: Traceback (most recent call last): File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/IntegrationsVirtualEnvironment/VirusTotal_V31.0/c2gg15pc.pnz/3lmtgobc.vod.py", line 53, in <module> main() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/SiemplifyUtils.py", line 79, in wrapper return func(*args, **kwargs) File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/IntegrationsVirtualEnvironment/VirusTotal_V31.0/c2gg15pc.pnz/3lmtgobc.vod.py", line 13, in main siemplify = SiemplifyAction() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/SiemplifyAction.py", line 54, in __init__ self.init_proxy_settings() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/Siemplify.py", line 102, in init_proxy_settin

05
T
V
vinnie17New Member
posted in Google Security Operations
Supported Data Sources

Can someone help me understand the different supported data sources for Chronicle?Thanks in advance.

13
rajukg11
Staff
M
Michael_ScheppNew Member
posted in Google Security Operations
Use multiple placeholders in HTML Email Templates

Hi all, does anybody know how to use multiple placeholders in HTML Email Templates? So for example: "Case {Case.Id} was assigned to {Case.AssignedUser}" If possible, I want to use that feature directly instead of leveraging always the Jinja action first. The docu ( https://documents.siemplify.co/en/articles/483-how-do-i-put-elements-of-the-case-data-into-an-email-message ) doesn't provide any good info....

23
T
A
Adam_HokeNew Member
posted in Google Security Operations
How to use the gitsync powerup

Is there any documentation online how to use the gitsync powerup? I get python stack trace errors when testing my configuration settings. Running remotely.

02
A
J
Joseph3New Member
posted in Google Security Operations
Pick up a file from the backend through an action

Dear Community, Does anyone know of a way to pick up a file from the backend through an action and upload it to a casewall?

04
C
A
Anuj_shrivastavNew Member
posted in Google Security Operations
List all agents using postman

hi Team, I am new to siemplify, I want to list all agents using postman, but I am not able to find out, what baseUrl I should pass here {{baseUrl}}/api/external/v1/agents/GetAgents I have a cloud instance that I am accessing using https://app.siemplify-soar.com/ so what would be the baseUrl?

02
A
H
Harrison_DanoNew Member
posted in Google Security Operations
custom list in Siemplify

so the custom list in Siemplify is not a CSV-type custom list in Splunk Phantom where we can add rows and we can search for values in the playbooks. Is this correct?

02
H
H
Harrison_DanoNew Member
posted in Google Security Operations
Create custom list in Siemplify?

Hi guys. Where can I create custom list in Siemplify? I don't see it in menu

02
H
A
Anuj_shrivastavNew Member
posted in Google Security Operations
Connect Siemplify using api call

Hi Team, i am trying to connect to https://app.siemplify-soar.com using api call, do i need to do any change at siemplify instance end, i have only created the api key and trying the connection using base url.. bcs i am getting ERROR: "HTTPSConnectionPool(host='app.siemplify-soar.com', port=443): Max retries exceeded with url: /api/external/v1/cases/CreateManualCase (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7f1f20694cd0>, 'Connection to app.siemplify-soar.com timed out. (connect timeout=30)'))"

00
A
G
Gary_BlackwellNew Member
posted in Google Security Operations
Missing the case wall

Siemplify updated to a new version, and I am missing the case wall. Does anyone know how I can find it or is it a permissions setting?

02
Y
F
Farukh_ShaikNew Member
posted in Google Security Operations
List of values assigned to a key in dictionary

Hey all, I have a list of values assigned to a key in dictionary like sample_dict = {abc: [1, 2, 3]} how can I assign this to an event dictionary in connector without throwing an error?

01
R
B
Ben_MontourNew Member
posted in Google Security Operations
Default mappings

How does one use the default mappings that come with different integrations?

01
J
M
mbricNew Member
posted in Google Security Operations
MicrosoftAzureSentinel v 19.0 integration Connector

Hi I just got access to the new Cloud version of Community Edition, and I wanted to connect with Microsoft Sentinel. But in the MicrosoftAzureSentinel v 19.0 integration there is no connector available. Is that a limitation of the Community Edition?

00
M
W
Werner_SolorzanNew Member
posted in Google Security Operations
Maximum alert name length

Hey guys, just wondering if anyone knows the maximum alert name length? chars or words?

01
T
N
Noah_AdamsNew Member
posted in Google Security Operations
How to get onboarded into the community cloud

I signed up for the CE and I never had time to deploy the VM. I finally hopped backed in to download it and it looks like it has changed to a cloud-hosted version for CE. How do I go about getting onboarded to this tenant?

00
N
R
Randy_MunroeNew Member
posted in Google Security Operations
I signed up for the CE of Siemplify

I signed up for the CE of Siemplify during the Google Security Summit. I got an email about my account being created, but it doesn't look like anything has been provisioned yet. Is that typical, and how long is the wait to get the account fully set up typically?

05
S
Staff
P
Paul_SkafNew Member
posted in Google Security Operations
Elastic Search Integration

Hi Guys, do you know why I can't find the Elastic Search Integration on the marketplace ? Isn't it available for community plans ?

00
P
M
Matt_WatkinsNew Member
posted in Google Security Operations
Search function provide full-text

Does the Search function provide full-text search for comments etc? Or is it limited to the few field parameters?

03
T
K
Khalid_KhanNew Member
posted in Google Security Operations
API to capture newly created cases using CaseSearchEverything

I have siemplify running on linux with the system time set to UTC time. I set the Siemplify user interface to display in US Eastern time (UTC-4). But when I create a case, the display for create time is offset by 2 hours (-2). My real issue is using the API to capture newly created cases using CaseSearchEverything which isn’t capturing newly created cases. Does anyone know what may be configured incorrectly?

02
K
C
cyrusrobinsonBronze 1
posted in Google Security Operations
Custom lists

Scenario: This file was previously ticketed in the following tickets: 12345, 12346, 12347 I don't think I can do this with custom lists because I don't have a playbook action to read out all entries in a custom list. Does anyone have a good way to accomplish this?

03
C
M
Matt_WatkinsNew Member
posted in Google Security Operations
Views settings

Where is the views settings? Or is it not available in the community edition? https://documents.siemplify.co/en/articles/205-define-default-view-for-cases-admin View files in slack

07
M
A
aarguellesNew Member
posted in Google Security Operations
Leverage a streaming

Hello, community! I need your insights regarding the following. I need to leverage a streaming-like API using Web sockets to keep listening for new alerts and events. I know that the connector's principle is to run every X time. This will not be applicable if I use Web sockets. Following are my thoughts regarding this: I appreciate your insights regarding this. If you have also faced this particular kind of connector, I will be excited to hear about your experience.

06
A
A
aarguellesNew Member
posted in Google Security Operations
Custom Connector display_id

Hi guys, again me! I have the following scenario. Custom connector developed for a custom technology. The technology collects network metadata and identifies if there are some contacts with known IOCs. The flow goes as follows: Scenario 1 Scenario 1 Scenario 2: Scenario 2: Takes from the end of scenario 1 Bonus scenario: Bonus scenario: a run test of the collector (SUCCESS) I have tried to debug adding logger lines but it seems there is no error in the logic added to the connector. The AlertInfo objects are created right and reported on the logs, but when you run the create_package function, only one case with one alert is created, except for the test scenario. Thanks in advance for reading me and taking the time to understand this case. I'd be more than grateful for any hint or advice you could share with me!

01
A

Badge winners

Show all badges
Terms & ConditionsCookie settings
Privacy Policy Terms of Service Gen AI Policy Community Guidelines Cookie Settings

© 2025 Google. All rights reserved.