If articles in web services are sent with only their body, they usually contain too little detail for deeper and more secure analysis. Security analysts benefit when an email article with all its raw data, including all headers, is sent to remote systems for deeper analysis.
For this purpose STORM has a function to send the raw email article data to a remote system with the generic interface operations and invokers.
If OTRS works as provider, this data is automatically sent when you set up the web service. This is only possible for the operation TicketGet.
If OTRS works as requester, the field needs to be selected if setting up the invoker settings by choosing the value ArticlePlain.
The article plain field can be used for the invokers TicketCreate and TicketUpdate.
The article raw source data can be seen in the web service communication payload. For testing purposes, this information can be also found in the debugger.
