I have been writing several of my own IDE integrations. I have not had issues with the ones that require just an action and a simple response. However, I have not figured out how to get the JSON output to work where I can use the JSON picker with the next function.
Is there any documentation on how to do this? Does anyone have any tips?
You can use the below to add your JSON as an output. In my example r_json is my dict object.
siemplify.result.add_result_json(r_json)
any json output or specific to Chronicle SIEM? are you using as part of a condition in the flow [event.<whatever>] = (whatever you need). depends on the use case.
any json output or specific to Chronicle SIEM? are you using as part of a condition in the flow [event.<whatever>] = (whatever you need). depends on the use case.
I am writing functions in the IDE for the SOAR.
I found a function in the Tools that will allow me to do this in a playbook. Buffer that will take a sting input and format it to JSON.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.