Skip to main content
Esteemed Contributor III
April 9, 2020

Technical Note: CSTN 00034 - Playbooks with Post-Create and Post-Update triggers might fail after upgrading to CyOPs 4.12.3 and later

  • April 9, 2020
  • 0 replies
  • 848 views
Description

Issue:

Playbooks with Post-Create and Post-Update triggers fail, after you have upgraded to CyOPsâ„¢ 4.12.3 or later, if in the subsequent steps use correlated records. 


Root Cause:

In CyOPsâ„¢ 4.12.1 and 4.12.2 the post trigger steps used to fetch related records and therefore the playbooks would work. From CyOPsâ„¢ 4.12.3 onwards the post-trigger steps will not fetch related records, since getting relationships data increases the trigger payload significantly if there are too many related records.


Solution

Fix:

You can add a Find Record step after the post-trigger step with True selected in the Include Correlated Records field.

OR 

You can add a Set Variable step after the post-trigger step with the following jinja:

{{ (vars.input.records[0]['@id'] + "?$relationships=true") | fromIRI }}
where vars.input.records[0][‘@id’] has an IRI as a value.


Applicable Version

CyOPsâ„¢ 4.12.3 onwards


Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT