topic Re: Emailaskuser - detail information response mail in Cortex XSOAR Discussions

Emailaskuser - detail information response mail

KeremGunal — Fri, 02 Aug 2024 07:00:29 GMT

Hello,

Emailaskuser automation is used to receive confirmation mail.

Here, we need to know who is returning the mail (from) in a fast and performant way.

do not want to search the mailbox, we cannot see the data of the return mail.

Is there an easy way?

Thanks.

Re: Emailaskuser - detail information response mail

cmcneil — Fri, 16 Aug 2024 14:48:58 GMT

I'm not sure I fully understand what you are trying to do. Could you post a screenshot and/or War Room output for your playbook task in question? Or perhaps some pseudo-code of what you would like to happen?

Re: Emailaskuser - detail information response mail

KeremGunal — Fri, 16 Aug 2024 15:13:06 GMT

I use emailaskuser automation.

I use the buttons to get a confirmation.(Yes/No)
Let's say there's a mailing group that I'm mailing to.

I would like to see it in context, let's say employee1@hotmail.com(in this mailing group.), whoever responded to me via e-mail from here.

Re: Emailaskuser - detail information response mail

cmcneil — Fri, 16 Aug 2024 15:42:13 GMT

Based on the Help Center docs, it looks like all responses to a communication task are recorded in the incident context data.
(Expand the "Create a data collection task" and see the second paragraph here https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-communication-task)

I would create a simple playbook and give it a test run emailing yourself first to see what the context data looks like based on your response to the Email Ask User task. After you know what your context data will look like, you'll probably have enough information to create either a conditional task, or your next automation task.

Since you are sending the email to a group or distribution list, rather than multiple individual addresses, I'm not sure how XSOAR will handle multiple responses. Also, since there is going to be a delay between any two people's responses, you will need to be very specific on how you create the conditional "wait" task after your EmailAskUser task. See here for an example and details https://xsoar.pan.dev/docs/reference/scripts/email-ask-user.

Re: Emailaskuser - detail information response mail

KeremGunal — Fri, 16 Aug 2024 15:51:41 GMT

I use EmailAskUserResponse for the return response and I get the return successfully.
but there is no approval in this code.
For this reason, I edited the code and got the incoming data directly.

setContext('restotal', res);

a lot of data came but still no from address.

Re: Emailaskuser - detail information response mail

cmcneil — Fri, 16 Aug 2024 17:20:28 GMT

I put together a quick playbook with a few different question types to see how the responses are formed.

What data did you get back? When I tested this, the "Questions.Answers.name" key came back with the email address that I used in the "To:" field.

If that is the same for you, then I believe you are running into a limitation of the Email Ask User task and expecting multiple responses from a group mailbox/single email address.

In that case you will need to send the email to each user you want to collect a response from to collect their specific responses. Try using a comma separated list of addresses in the To: line and have multiple people respond.

Re: Emailaskuser - detail information response mail

cmcneil — Fri, 16 Aug 2024 17:33:23 GMT

Or, you could just add a Short Text question to the list of questions and ask the user to put in their email address.
Sometimes simple solutions are better.