Adding an Error condition to a failed playbook run question

PA_nts — Wed, 18 Jun 2025 08:14:36 GMT

Hi All,

so I have some playbooks that when triggered, sends my incident/alert json payloads to an external webhook every time a new incident is triggered.

I have defined an error condition task that sends an email to an email addr when this fails (webhook url is unavail or someone changed something that breaks this process etc) - this works. but i want to enhance on it is possible.

question - how do you guys do this? do you have a playbook example i can use as a template perhaps?

essentially, i am thinking of adding it as a sub-playbook purely for this (long-term looking at multiple xsiam clients) so i want the email body to include tenant name and error codes in the email body if possible.

thanks in adv

topic Adding an Error condition to a failed playbook run question in Cortex XSIAM Discussions

Adding an Error condition to a failed playbook run question