topic Re: delay in a playbook in Cortex XSOAR Discussions

delay in a playbook

m.hamadieh — Thu, 08 Jun 2023 10:18:01 GMT

Hello everyone,

What is the best option to add a delay in a playbook, for example I have 2 automated tasks and want task 2 to start after task 1 finishes by 1 hour.

I thought of creating a one-line automation that has time.sleep(amount) and adding this automation between the 2 tasks. but not sure how safe is this especially for long times.

any recommendations.

Thanks in advance.

Re: delay in a playbook

gyldz — Thu, 08 Jun 2023 12:04:58 GMT

Hi @m.hamadieh ,

There is a sleep automation script for this purpose. Selecting "run without a worker" from the advanced task will not consume any worker. Please be informed that this is only advised for this automation.

I hope this answers your question.

Re: delay in a playbook

MBeauchamp2 — Thu, 08 Jun 2023 14:32:16 GMT

You can also use SLA Timers instead of Sleep, it was covered in a recent Blog post:

https://live.paloaltonetworks.com/t5/customer-news/you-complete-me-or-the-alternative-way-to-put-your-playbook-to/ba-p/539440

Re: delay in a playbook

YilmazDincer — Fri, 09 Jun 2023 09:17:01 GMT

https://xsoar.pan.dev/docs/integrations/scheduled-commands