FortiSOAR Discussions
ranjeet
New Contributor III

Issue With The Playbook Trigger Condition

Hello,

 

I tried to design a playbook that triggers when an alert is updated. I set a condition to check if it was created 5 minutes ago. However, when I created an alert and updated it, the playbook didn't work. But, when I created another playbook and used a step to find records with the same condition, it worked correctly. Please check the attached image for more information.

 

Trigger Point.PNG

Find Records.PNG

 

Can Anyone help me to resolve this playbook trigger point condition issue.

 

 

3 REPLIES 3
malayamanas_FTNT

"ON UPDATE' trigger is triggered when any of the field is updated of a record for targeted module/table.

The first "ON UPDATE" trigger playbook says if a record is just now updated AND if its creation time is 5 minutes ago from NOW, then select it. 

 

Is above that required condition for "ON UPDATE" trigger?

MALAYA MANAS PANDA
Professional Services Consultant
ranjeet

Yes

kcanalichio
New Contributor III

There is a bug with the on update and fields that use datetime...im having the same problem. It supposed to be fixed in an upcoming release. You will need to use the some logic in an onupdate playbook to get the desired result