topic Playbook waiting for a manual Set task in Cortex XSOAR Discussions

Playbook waiting for a manual Set task

rafael-usano — Tue, 26 Dec 2023 12:10:46 GMT

Hello community,

I have some playbooks that are responsible for closing incidents in the various sources (XDR, QRadar, XSOAR, JIRA, ...) once I enter a reason or reason for them to be closed.

I have done this using a "Set" automation that waits for input from the user and gives an error as it is a "Set" where the value "value" that is inserted in the key is empty. In this way, the Playbook stops, sets the "Run Status" to "Error" (in red) and waits for a value to be entered in that task and it is run again manually to close the incident.

My question is, is there a way to set the "Run Status" to "Waiting" manually? Or, otherwise, perform this operation of setting a value in a context key or something similar without the "Run Status" being set to "Error"?

Thank you very much in advance.

Greetings.

Re: Playbook waiting for a manual Set task

gyldz — Wed, 27 Dec 2023 19:10:15 GMT

Hi @rafael-usano ,

Instead of the standard task, first, you can use a data collection task which will ask a close reason and then you can use a set task to pass the answer of the data collection task as a close reason.

Re: Playbook waiting for a manual Set task

rafael-usano — Thu, 28 Dec 2023 13:35:21 GMT

Thanks, @gyldz!

I have used it and it works great for what I wanted.

Greetings!!