Including ADOM Information in FortiAnalyzer Playbook Webhook Actions
Hello Fortinet Community,
I'm currently working with FortiAnalyzer (version 7.4.x) and have set up an automation playbook that triggers upon specific events, such as multiple failed login attempts. The playbook includes a webhook action intended to send event details, including the ADOM (Administrative Domain) information, to an external system.
In my webhook action, I'm attempting to include the ADOM using the ${adom} macro in my automation Playbook.
However, the adom field in the payload is coming through as blank. I understand that in notification profiles, the ADOM information is readily available, but it seems that in the context of playbook actions, this macro isn't being populated.
I've reviewed the FortiAnalyzer documentation, particularly the section on webhook connectors and supported macros , but it doesn't provide clarity on this specific issue.
Has anyone encountered this problem or found a workaround to include the ADOM information in playbook webhook actions? Any guidance or suggestions would be greatly appreciated.
Thank you!
FortiAnalyzer
