Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-05-2023 04:48 AM
Hello All,
I have been working on the XSOAR Platform for a long time and there is something which I haven't been able to find a solution for.
I would like to rerun a playbook for multiple incidents and I use the !setPlaybook to do this. I do this after rectifying the issue on the playbook for example task error or similar. The problem is that many playbooks we are working with have a communication task such as Ask User or a Slack notification.
Is there a way to rerun the playbook and prevent the communication tasks from running?
As you can understand this can be an issue especially if the incident is not so recent therefore the communication task would be superfluous. I understand that you can re-run a stopped-on error task yet this can cause the same problem because it will reach the communication stage.
I would be interested to know if there is a way to tag or cause the communications tasks to skip only during this rerun.
Many thanks.
11-07-2023 07:25 AM
One way I can think of is have the communication task set a value into Context using the Set automation.
Then add a conditional in front of your DC tasks that checks whether that Key is set, and bypass the task if so.
On the first run it will work, on the following runs it will skip them.
11-07-2023 07:25 AM
One way I can think of is have the communication task set a value into Context using the Set automation.
Then add a conditional in front of your DC tasks that checks whether that Key is set, and bypass the task if so.
On the first run it will work, on the following runs it will skip them.
11-12-2023 01:53 AM
@MBeauchamp2 , Thanks for the insight. It is possible that I can add this flow for all playbooks no matter how laborious it is. It is a shame that there is not way to manage communication tasks from an overview level. I could look into a feature request.
I will mark your answer as a solution even though it is more of a workaround.
Cheers.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
