[Rtir] Formatted output from RTIR
Kevin Falcone
falcone at bestpractical.com
Tue Mar 13 14:49:27 EDT 2012
Please keep list replies on the list.
On Tue, Mar 13, 2012 at 09:19:03AM +0000, Matt Newham wrote:
> Thanks for the pointers. Basically, the way I am currently trialling RT is within a SOC like
> environment over a CERT. I have used it in previous positions in both capacities. Here is an
> example of workflow:
>
> Incident -> Create Incident Ticket -> Gather evidence etc & complete mandatory fields ->
> Create linked Incident Report -> Incident report pulls selected information from the Incident
> -> Management "approve" the report -> Report gets moved to "reporting" queue for the
> respective client -> client can view that queue and take ownership of the ticket for remedial
> action
>
> So, what I would like is the "Incident Report" details to be pulled out and dropped into a
> templated output (currently this is a word template which is manually completed by the
> analysts, I dont want to duplicate effort so if the report can be automagically populated that
> would be preferable). This can then be issued to the less technical folk in the client org or
> for any clients that don't have the capability to access RT.
>
> What do you think to the above? I think most of the workflow parts I can do with the approval
> plugin, scrips to move tickets around etc
>
It sounds like you need to learn RT's perl api and export data using
it. I'm not sure how best to trick word into believe that it's a doc,
you may want to just generate HTML and work from there.
-kevin
More information about the Rtir
mailing list