Trigger action each time an answer is received on data collection task

[LBekaddour]

Hi everyone,

I am trying to achieve the following scenario:

Send a form with data collection task, the form is closed after 4 weeks. The form asks for a hostname to contain within CrowdStrike

Every time someone answers the form, I want to contain the machine in CrowdStrike.

However, the task is in "waiting" mode in XSOAR. I am not sure how to achieve this scenario,

Thanks for your help,;;

[madani]

Hello,

I also face to several issues with the behavior of the data collection. I don't think what you want to do is possible, because when someone answer to the data collection, the task will be considered as completed.

One solution can be to use recursive jobs or incident. When the data collection is completed and the machine contained, it will launch a new job or restart the playbook of the incident. But the link of data collection will be regenerated, which can be confusing for your end-user.