topic Re: Sending only one email for an Ask Task in Cortex XSOAR Discussions

Sending only one email for an Ask Task

michaelsysec242 — Mon, 04 Jul 2022 08:07:45 GMT

Hello, I am attempting to configure an Ask Task to send one email only with no retries and an end by SLA condition. I have implemented the settings to no retries (default) and to end the task upon SLA Breach 6 hours. Once saving the playbook I see that the SLA Breach setting is returned to original state without being marked. This is a relatively simple function that I require yet XSOAR is not delivering on this feature. Does anyone know why this happens and what is recommended for a single email to be sent ?

Re: Sending only one email for an Ask Task

MKececioglu — Mon, 04 Jul 2022 12:51:58 GMT

Hi,

Maybe you can try timing tab to set retries 0 instead of Advanced tab.

Re: Sending only one email for an Ask Task

michaelsysec242 — Mon, 04 Jul 2022 13:11:03 GMT

As I have outlined in the Question, i have set the amount to 0 and have checked the "Complete task as :No"

Once saving the playbook the setting is returned to default when reentering the playbook.

Re: Sending only one email for an Ask Task

jfernandes1 — Mon, 04 Jul 2022 23:45:31 GMT

Hi @michaelsysec242, hmm not seen this issue before.I assume you set the task like the below screenshot.

From what you said, the settings are not sticking after you save the playbook. Could you send me the screenshot of your task setting, same as above. Also, could you try setting this task in a new playbook and let me know if that works.

I've also attached a playbook I created with the above settings, please upload and let me know if it sticks on your server.