Skip to main content
Solved

SOAR IDE and JSON Output

  • April 4, 2024
  • 4 replies
  • 103 views

mccrilb
Forum|alt.badge.img+12

I have been writing several of my own IDE integrations. I have not had issues with the ones that require just an action and a simple response.  However, I have not figured out how to get the JSON output to work where I can use the JSON picker with the next function.

Is there any documentation on how to do this? Does anyone have any tips?  

 

Best answer by mikewilusz

You can use the below to add your JSON as an output. In my example r_json is my dict object.

siemplify.result.add_result_json(r_json)

4 replies

mikewilusz
Staff
Forum|alt.badge.img+10
  • Staff
  • Answer
  • April 4, 2024

You can use the below to add your JSON as an output. In my example r_json is my dict object.

siemplify.result.add_result_json(r_json)

pigram86
Forum|alt.badge.img+7
  • Bronze 2
  • April 4, 2024

any json output or specific to Chronicle SIEM? are you using as part of a condition in the flow [event.<whatever>] = (whatever you need). depends on the use case. 


mccrilb
Forum|alt.badge.img+12
  • Author
  • Silver 2
  • April 4, 2024

any json output or specific to Chronicle SIEM? are you using as part of a condition in the flow [event.<whatever>] = (whatever you need). depends on the use case. 


I am writing functions in the IDE for the SOAR.


mccrilb
Forum|alt.badge.img+12
  • Author
  • Silver 2
  • April 22, 2024

I found a function in the Tools that will allow me to do this in a playbook. Buffer that will take a sting input and format it to JSON.