xsoar change incident owner

Bar_Magnezi — Wed, 25 Oct 2023 05:28:12 GMT

Hi ,
is there a way to put a listener on every incident , and every time an incident owner is changing - it will run a playbook or a script.
The incident owner can be changed at any time during the playbook of the incident is running.

Re: xsoar change incident owner

gyldz — Wed, 25 Oct 2023 08:44:54 GMT

Hi @Bar_Magnezi ,

Have you already tried the field change trigger script? You can develop and define the script in the owner field settings.

https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.8/Cortex-XSOAR-Administrator-Guide/Incident-Field-Trigger-Scripts
https://www.youtube.com/watch?v=UgkEVkdP5iY

topic Re: xsoar change incident owner in Cortex XSOAR Discussions

xsoar change incident owner

Re: xsoar change incident owner