Retrieve Ariel Search Result

Retrieve the results for a Qradar AQL query executed by the Perform Ariel Search action.

External Documentation

To learn more, visit the QRadar documentation.

Parameters

Parameter	Description
Search ID	The ID for the search that has been performed.

Example Output

{
	"events": [
		{
			"sourceip": "<string>",
			"destinationip": "<string>",
			"username": "<string>"
		}
	]
}

Workflow Library Example

Retrieve Ariel Search Result with Qradar and Send Results Via Email

Preview this Workflow on desktop