Context polling playbook

rathilaramesh13 — Fri, 28 Feb 2025 15:35:59 GMT

In XSIAM playbook,I’m trying to fetch the incident status. When the incident status is changed to for eg under_investigation I want to my playbook to run a certain task.
for this I want use context polling sub playbook

key : parentIncidentFields.status

now for value it is asking for a regex. Need help with the regex format

topic Context polling playbook in Cortex XSIAM Discussions

Context polling playbook