Playbook Conditions : How to Combine Multiple Conditions in One Task

NobodyNose2567 — Wed, 29 Nov 2023 20:29:52 GMT

Hi, I am new to XSOAR and I was wondering if there was a conventional way of arranging similar conditions. For example, I am getting a ticket in task 1 and I want the following task (task 2) to give a value to a field called ticket.status. conceptually, the condition would look like this:

IF ticket.severity == 'Critical' then ticket.status = 1

OR if ticket.severity == 'Medium' then ticket.status = 2

OR if ticket.severity == 'Low' then ticket.status = 3

In a programming language we can combine multiple conditions into 1 statement. Is there a way to combine multiple conditions like this into one task?

Re: Playbook Conditions : How to Combine Multiple Conditions in One Task

gyldz — Tue, 05 Dec 2023 08:43:07 GMT

Hi @NobodyNose2567 ,

you can achieve that using a conditional task. First, you need to specify your conditions which follow the path accordingly. Then for each condition, you can select Set Task to set the status.

topic Re: Playbook Conditions : How to Combine Multiple Conditions in One Task in Cortex XSOAR Discussions

Playbook Conditions : How to Combine Multiple Conditions in One Task

Re: Playbook Conditions : How to Combine Multiple Conditions in One Task