Passing parameters within a Playbook Trigger?

  • 23 August 2022
  • 1 reply

Userlevel 2

Hi folks, I’m trying to set up a Playbook Trigger, but wanted to potentially pass through parameters for it.

The setup is as follows:

  • Alert is triggered
  • Playbook Trigger runs based on matching alert_id
  • Playbook generates case data and runs additional actions/playbooks.

I would (ideally) like the Playbook Trigger to pass details from the incident to the Playbook it is linked to.

Is this something that’s possible from the Trigger directly, or do I need to use a Query/another action within the Playbook to try and extract the info I need?

On that note, is there an easy way to get data from the incident that triggered the alert within the playbook itself?

1 reply

Userlevel 2

I realise this should’ve gone into the SOAR section but I don’t think I can move it, so apologies!