Alert Grouping -Overflow case
if alert grouping criteria is set toGrouping Condition: XYZ Rule Name and UserOverflow Condition: Max 100 Aler...
•
in SOAR Forum
• Activity in Google Security Operations Forums
Send email when a case is raised to an incident
Hi I'm new to Google SecOps and need some guidance please?I need to be able to send an email whenever a case i...
•
in SOAR Forum
• 
Service account key creation is disabled
Hello, Google support team.I'm trying to crate a or download a json file for firebase push notifications. whil...
•
in SIEM Forum
• 
Parsers - selecting last element in an array without specifying exact index?
hey, wondering if anyone has any decent ideas to solve this condundrum in CBN given the below json object to p...
•
in SIEM Forum
• 
Understand how to create an overflow alert
Hi folks, for the sake of learning, I want to understand how the alert overflow mechanism works. In the docume...
•
in SOAR Forum
• 
Chronicle Forwarder "strconv.Atoi: parsing" error
Dear all, This is not really a question, but rather a memento, waiting for an official fix to be rolled out, f...
•
in SIEM Forum
• 
Existing | default keyboard shortcuts - where do I find list?
Hi folks I just accidentally found that I can comment out a line in SIEM UDM search by ctrl-/ and I can be any...
Comments from Analyst
I need some help for the following problem. We would like to add an analyst opinion or comment during the inve...
Alert Grouping
1) Grouping can be done for how long (Duration)2) Can it support the grouping rule by rule basis (Every rule h...
•
in SOAR Forum
• 
Question on cbn-tool/chronicle_cli output format
Why we are getting the output in the below format when we validate the sample log with parser using cbn-tool/c...
•
in SIEM Forum
• 
