Setting up a counter in XSOAR

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Setting up a counter in XSOAR

L0 Member

Hello,

So we have a playbook that is meant to send alerts via email in strikes. In each strike there is a link to a survey that has only YES/NO answers and based on the answers given be the recipients of those emails we want the playbook to follow a path. 

We thought that we might need a counter and timer for this specific task, for example, regarding the timer let's say I want to setup a 15 minutes timeframe, the first user to receive the email answers with no and after few minutes(within those 15minutes), 2 other users will answers with yes. I want those 2 yes answers to be taken in consideration and follow the path for closing the playbook and not going to the second strike email.

Thank you so much!

Cortex XSOAR 

2 REPLIES 2

L4 Transporter

You could use a builtin loop, and have it update a counter on each go around, there is an example in video 12: 

https://live.paloaltonetworks.com/t5/cortex-xsoar-how-to-videos/tkb-p/Cortex_XSOAR_How_to_Videos

 

For your data collection task (assuming that's what you're using), you can specify to move on after receiving X number of replies AND/OR a given SLA. 

 

You'd just need a conditional to check the responses and if you got enough of them, and either set the condition to break the builtin loop, or to repeat it.  Just make sure to manage your context appropriately on each loop. 

 

Screenshot 2023-12-11 at 8.51.46 AM.png

Thank you! I will try and let u know how it went

  • 428 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!