Splunk SOAR

Help with Display Extracted List Items Vertically in Format Block

Sidpet
Loves-to-Learn

Hi all,

I have a playbook where I extract multiple rule titles from an ES investigation.  Currently, the data shows like this in the results 

Rule Title: 2 items

0: item 1

1: item 2

when I extract it and create a servicenow ticket it shows the items like this ['item 1', 'item 2'].  I want them to be displayed like they show in the results vertically one item below the other and without the brackets. I tried the %% 

{0}

%% but it does not work. any ideas to help resolve this? 

I’m using SOAR version 6.4.x. Any guidance or best practices would be appreciated. still a novice learning the tool.

Thanks!

Labels (1)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...