Convert JSON result to CSV and ADD csv file as attachment on the case wall

[vanitharaj1208]

Convert JSON result to CSV and ADD csv file as attachment on the case wall

[cmorris]

Have you tried the Save JSON to CSV action (https://cloud.google.com/chronicle/docs/soar/marketplace-integrations/csv#save_json_to_csv) and the Add Attachment action (https://cloud.google.com/chronicle/docs/soar/marketplace/power-ups/file-utilities#add-attachment)?

[vanitharaj1208]

i tired with same solution, how to i access that file location where does it store ..../tmp/filename 

did u try ?

[vanitharaj1208]

i had build custom action to convert json to csv then i encode csv to base64 and finally passed base64 blob as input to attachment action from fileutils

[VictorSOAR · Accepted solution]

Hi @vanitharaj1208 ,

I had also created a playbook to convert json to csv and attaching csv file to case wall as below:

1. Used 'CSV - Save Json To CSV' to get the json object in csv file. This action is available in CSV integration from marketplace.

2. Used 'FileUtilities - Get Files as Base64' action to convert this csv file to base64 strings.

3. Used 'FileUtilities - Add Attachment' action and provided base64 blob of 'FileUtilities - Get Files as Base64 json results' and in Type provided .csv file type to attach csv file to case wall.

[vanitharaj1208]

Ill Check and Reply ... Thank you

[vanitharaj1208]

It working and i have tested. 

[ORBR]

@VictorSOAR 

Can I add multiple JSON results into the same CSV file?

[vanitharaj1208]

single as of now 

[jasonsigman]

Has this ever been updated to work with multiple JSON results?

[vanitharaj1208]

yes i have worked with multiple json recently