About willzj

willzj

Hello! I'm trying to use source_grouping_identifier to drive alert grouping in SOAR. There's a relevant post here, and the SOAR documentation is here.The field is showing on the SOAR UI, but SOAR is creating a separate case for each alert rather than...

willzj

Thanks for the reply Jeremy! It was actually configured correctly, but it seems that the grouping settings don't work while testing the connector. When I flipped the connector on so it was actually being scheduled, all the alerts were grouped as expe...

willzj

Thanks for this post! source_grouping_identifier is perfect for my use case, but I can't seem to get it working while testing my connector.I have only 1 grouping rule configured - it's for "All alerts" and group by "Source Grouping Identifier".I'm ha...

My Stats

jared's Bio

Badges willzj Earned

Recent Activity

source_grouping_identifier not working for alert grouping

Re: Source group identifier

Re: Source group identifier