Google Security Operations

My SIEM is ELK + ElastAlert and it seems I can't connect ElastAlert to siemplify

Hello, Whenever I'm calling this fetch timestamp siemplify.fetch_timestamp(datetime_format=True, timezone=False) function after saving the time stamp using siemplify.save_timestamp(datetime_format=True, timezone=False, new_timestamp=unix_now()) it's working fine but after the loop is running fresh its giving me "1970-01-01 00:00:00+00:00" this time. Any idea why?

Can you say me, where I can find the links to download the solution?

Hi Community, does anyone here use the "Re-attach playbook" action under the tools integration? This is a pivotal action in scenarios where playbook has to rerun periodically to meet certain conditions; however, the action cannot call the same playbook utilizing it and also cannot call a block. Manually, everything works fine. Is there a work around to this?

Hi Guys, Is it possible to save the event ingested time in a connector? If yes, how can I save it? I tried using siemplify.fetch_timestamp() but did not work.

Can someone explain to me what the differences between ElasticSearchV7 and ElasticSearch Integration are and why I should choose one over the other?

Hi Community, is it possible to trigger a playbook from a Job? I would like to use Siemplify to collect information from various Integrations and send all these data via email on daily basis. A playbook fits best, because it allows me to call Actions from different Integrations. But I don't want to create case. Is there a way to trigger playbook without a case? Many thanks in advance for any suggestions you may have!

This post was originally sent by Roshaan Tariq Hi Guys, I'm getting this error, when I used a domain to host Siemplify on port 443. Any solutions? STDOUT: STDERR: Traceback (most recent call last): File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/IntegrationsVirtualEnvironment/VirusTotal_V31.0/c2gg15pc.pnz/3lmtgobc.vod.py", line 53, in <module> main() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/SiemplifyUtils.py", line 79, in wrapper return func(*args, **kwargs) File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/IntegrationsVirtualEnvironment/VirusTotal_V31.0/c2gg15pc.pnz/3lmtgobc.vod.py", line 13, in main siemplify = SiemplifyAction() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/SiemplifyAction.py", line 54, in __init__ self.init_proxy_settings() File "/opt/siemplify/siemplify_server/bin/Scripting/PythonSDK/Siemplify.py", line 102, in init_proxy_settin

Can someone help me understand the different supported data sources for Chronicle?Thanks in advance.

Hi all, does anybody know how to use multiple placeholders in HTML Email Templates? So for example: "Case {Case.Id} was assigned to {Case.AssignedUser}" If possible, I want to use that feature directly instead of leveraging always the Jinja action first. The docu ( https://documents.siemplify.co/en/articles/483-how-do-i-put-elements-of-the-case-data-into-an-email-message ) doesn't provide any good info....

Is there any documentation online how to use the gitsync powerup? I get python stack trace errors when testing my configuration settings. Running remotely.

Dear Community, Does anyone know of a way to pick up a file from the backend through an action and upload it to a casewall?

hi Team, I am new to siemplify, I want to list all agents using postman, but I am not able to find out, what baseUrl I should pass here {{baseUrl}}/api/external/v1/agents/GetAgents I have a cloud instance that I am accessing using https://app.siemplify-soar.com/ so what would be the baseUrl?

so the custom list in Siemplify is not a CSV-type custom list in Splunk Phantom where we can add rows and we can search for values in the playbooks. Is this correct?

Hi guys. Where can I create custom list in Siemplify? I don't see it in menu

Hi Team, i am trying to connect to https://app.siemplify-soar.com using api call, do i need to do any change at siemplify instance end, i have only created the api key and trying the connection using base url.. bcs i am getting ERROR: "HTTPSConnectionPool(host='app.siemplify-soar.com', port=443): Max retries exceeded with url: /api/external/v1/cases/CreateManualCase (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7f1f20694cd0>, 'Connection to app.siemplify-soar.com timed out. (connect timeout=30)'))"

Siemplify updated to a new version, and I am missing the case wall. Does anyone know how I can find it or is it a permissions setting?

Hey all, I have a list of values assigned to a key in dictionary like sample_dict = {abc: [1, 2, 3]} how can I assign this to an event dictionary in connector without throwing an error?

How does one use the default mappings that come with different integrations?

Hi I just got access to the new Cloud version of Community Edition, and I wanted to connect with Microsoft Sentinel. But in the MicrosoftAzureSentinel v 19.0 integration there is no connector available. Is that a limitation of the Community Edition?

Hey guys, just wondering if anyone knows the maximum alert name length? chars or words?

I signed up for the CE and I never had time to deploy the VM. I finally hopped backed in to download it and it looks like it has changed to a cloud-hosted version for CE. How do I go about getting onboarded to this tenant?

I signed up for the CE of Siemplify during the Google Security Summit. I got an email about my account being created, but it doesn't look like anything has been provisioned yet. Is that typical, and how long is the wait to get the account fully set up typically?

Hi Guys, do you know why I can't find the Elastic Search Integration on the marketplace ? Isn't it available for community plans ?

Does the Search function provide full-text search for comments etc? Or is it limited to the few field parameters?