-
Automatically update data tables without requiring refresh
When you add an artefact for automatic/manual lookup, and upon the action is complete, it requires a hard-refresh to have the data-tables populated with results. Is there a way to enable an auto-refresh, the moment an action is complete?
0
Future consideration
-
Resilient Systems to Splunk fn_splunk_integration
Typically in an a large enterprise there could be multiple Splunk instances.There could be Splunk instances for different departments. There could be different Splunk search heads, for example an Enterprise Search Head and Enterprise Security Sear...
0
Submitted
-
Add pytz and dateutil.parser modules as available imports for python3 scripts
It would be nice to be able to import these modules (pytz, dateutil.parser) in python3 scripts.Parsing date/time strings with datetime is useful, but sometimes a bit limited. pytz more elegantly handles timezones and dateutil is a bit more robust...
0
Future consideration
-
World Map Geo-location Reporting
A reporting dashboard that could plot data based on Geo-location information available through internal company resources or an IP, placing data points indicating visually where incidents occur globally. This could be a static map, or interactive,...
1
Future consideration
-
Limit auto escalation upon some condition
Need to limit the auto escalation of similar kind of offenses after some time or some number of incidents created. There should be a threshold where we can limit the incident creation from auto escalation rules.Some times due to third party discre...
0
Under review
-
Mandatory field for task closure
for some fields visibile in Task view, required those fiedls to be filled in before closing the task
5
Future consideration
-
Allow the Splunk Addon to escalate to multiple Resilient Servers
For internal reasons, we are running multiple Resilient servers. Today, the Splunk Addon only allows escalations to Resilient in a 1:1 relationship.We would like to see a 1:n relationship.
1
Future consideration
-
Allow built-in artifacts to accept multiple values / multiline input, and create multiple artifacts at once
Some out-of-the-box Resilient artifacts allow me to paste in a list of values, and will create a bunch of artifacts all at once. But some don't - it'd be helpful to be able to paste in a list of email addresses or file hashes.
7
Future consideration
-
Having the possibility to pass parameters from workflow to script
We would to use "generic script" that will use some workflow parameters as entry parameters. The problem is that workflow parameters can only be set in postprocess, and not before the function is called.For example: telling to the script: the work...
0
Future consideration
-
QRadar Integration App to support flows and not just events
Currently, the integraiton app only supports fetching events and not flows. We would like for it at be able to return events and flows in a single search.
1
Future consideration