Query related to [HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member]

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Query related to [HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member]

L2 Linker

Hi Team,

I have standard customer, their requirement is

[HK][CCBA][232689][Finetune XSOAR playbook - Update the Group Member] Customer informed that existing playbook flow is XSOAR will get the group member list from 1 device, and update the member list, then XSOAR will deploy the updated member list to ALL Fortinet devices.

 

Customer want to finetune the playbook to get the group member list and update the list to each Fortinet device one by one.

 

Please advise.

1 REPLY 1

L3 Networker

Hi @assubramania !

Anytime you want to loop within XSOAR, you will need to create a sub-playbook or loop within a script.

We recommend using the sub-playbook option for easier tracking and troubleshooting.

When you create a sub-playbook within a playbook, the task will have a Loop tab that allows you to loop for each input.

ysato_0-1718899190066.png

For your situation, you want to pass in two inputs: one is a list of group members and the other is a list of Fortinet devices. However, when you pass two lists into sub-playbook looping, it will grab the first item from list1 and the first item from list2, then move on to the second item from list1 and list2.

There is great documentation and a video explaining this here:

If this is not the behavior you want to achieve, you can pass the group member list as a string by combining the list into one string with commas, and then split it into a list once you pass it into the sub-playbook. This way, only the list of Fortinet devices will be looped.

 

Feel free to ask for clarification or any follow-up questions!

  • 432 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!