Retrieve Ariel Search Result - BlinkOps Documentation

Retrieve the results for a Qradar AQL query executed by the Perform Ariel Search action.

External DocumentationTo learn more, visit the QRadar documentation.

Parameters

Parameter	Description
Search ID	The ID for the search that has been performed.

Example Output

{
	"events": [
		{
			"sourceip": "<string>",
			"destinationip": "<string>",
			"username": "<string>"
		}
	]
}

Workflow Library Example

Retrieve Ariel Search Result with Qradar and Send Results Via Email

Preview this Workflow on desktop