NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ27

VerifiedIncidents, notifications, and remediation

You need to reference the first source IP address from an incident in a playbook.

Which option shows the correct Jinja syntax to use a source-IP-address variable in a FortiSIEM playbook?

Explanation

Playbook input records are available through vars.input.records. The index [0] accesses the first record, and the srcIpAddr attribute retrieves that record’s source IP address.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!