How to stop a playbook task until ALL previous tasks are done?

T.Jagielski — Wed, 25 Sep 2024 16:51:31 GMT

Hi all,

I'm developing a playbook for that sends a number of queries to our SIEM in parallel and uploads the results as files to an incident. I want to introduce subsequent steps that all depend on the files existing, however I cannot figure out a good to make a "gate" task that stops the playbook from executing until all previously linked tasks are done OR errored out.

If the "second stage" ran before all queries were completed, even if they return successfully, their data wouldn't be picked up by the later steps. If there's something obvious in the built-ins I'm missing, please do let me know.

Best!

Re: How to stop a playbook task until ALL previous tasks are done?

Ivetto — Wed, 25 Sep 2024 17:22:42 GMT

Hello,

You could write a conditional that checks all the context data entries exist before continuing with the playbook execution.

topic How to stop a playbook task until ALL previous tasks are done? in Cortex XSOAR Discussions

How to stop a playbook task until ALL previous tasks are done?

Re: How to stop a playbook task until ALL previous tasks are done?