Handling errors in a playbook

alexbbryant — Tue, 12 Jul 2022 20:32:54 GMT

I'm looking to change the flow of my playbook not only if errors are encountered in my tasks, but dependant also on what those errors are. I found a tutorial on docs.paloaltonetworks.com that included this:

Step 3: For new tasks, in the Task Name field, type a meaningful name for the task that corresponds to the data you are collecting.

Step 4: Click the On Error tab.

Step 5: In the Number of retries field, type the number of times the tasks attempts to run before generating an error.

However, when I'm creating a new task, there aren't any tabs to be seen. Am I missing a step? Is this version dependant?

Thanks!

Re: Handling errors in a playbook

jfernandes1 — Wed, 13 Jul 2022 03:02:35 GMT

Hi @alexbbryant, yes this is version dependent. Only 6.8 includes this new feature. In older version of Cortex use the below solution.

Task 2: Can be any automation. Just ensure that you set the "Stop on error" to No.

For task 4: Use the isError automation. Like below.

topic Handling errors in a playbook in Cortex XSOAR Discussions

Handling errors in a playbook

Re: Handling errors in a playbook