Advanced SOAR reporting with custom context values

[ankitsynx]

Hi Community,

I have been looking for solution but with no luck so far. Is there a way to build SOAR reporting based on custom context values added to cases via playbooks?

[matthewnichols]

Hi @ankitsynx we are working on providing an answer for you as soon as possible. Thank you for your patience. 

[ipninichuck]

Unfortunately context values are not available in reporting. Case tags are available and can be used if the solution fits your needs. Though I understand that if the volume of values is large having all those tags added to a case can be cumbersome. 

[ankitsynx]

hey @ipninichuck , thanks for the suggestion and exactly that's the situation with our tags, they just hold multiple values for other purposes and adding them to the report makes it messier. 

Would you know if this is planned for SOAR reporting roadmap in future?

[ipninichuck]

Someone can correct if I am wrong but to my knowledge context values themselves are not slated to be available in reporting in the current roadmap. However, there are several features being added to case management next year that will significantly increase the amount of interaction analysts can have that will be available in reporting. I was just discussing this same issue with a colleague this morning and we were excited about some of the possibilities, and how they can be used to get around this context value problem potentially. So stay tuned for those starting in the first half of next year.

[ankitsynx]

Awesome that sounds good! thanks for sharing.