Send notable event variables to external REST API.

[deovratdeshmukh]

I want to send parameters from ES notable events to external SOAR (not Phantom) REST. Is there any addon available or the addon has to be developed. If addon needs to be developed, if there is any readily available framework to develop it quickly.

[anm_mporter]

Does your SOAR REST API accept a simple POST? Perhaps with an authtoken in the URL? then you can use the Webhook alert action to POST the results of a search to that url

Otherwise you are looking at a custom alert action.