How to Automatically Send an Email When an Incident is Created in XSOAR?

[O.Isik]

Hello,

I want to automatically send an email whenever an incident is created in XSOAR. I’ve created a playbook and written a simple script that sends an email for a specific incident when executed within the playbook.

However, I’d like to automate this process so that an email is sent automatically for every incident without manually triggering the playbook.

I know that setting my playbook as the default playbook for each incident type could work, but I’d like to avoid this approach. I also tried using pre-process rules but couldn’t get it to work.

Does anyone have suggestions or guidance on how to achieve this?

Thank you

[BharathwajTiruputkuzhi]

Hello! You can check out the server notification settings to see if those options suit your need. Or you can set up a playbook that will run for all incidents that has the first task as a notification email.