https://community.splunk.com/t5/Splunk-SOAR/REST-query-get-executed-from-a-playbook/m-p/580832#M760 <P>Hi All, I am writing a playbook that&nbsp;<SPAN>&nbsp;sends an automated email when a case is opened in phantom.&nbsp; &nbsp;I know&nbsp;If you are doing a manual promotion (via GUI), then you would need to have a REST query get executed from a playbook hitting the container endpoint and looking for "container_type": "case".&nbsp; Then you would just have a format block to populate the REST results and have a connected send email action via SMTP.&nbsp; what are the steps to get a REST query get executed?</SPAN></P><P>&nbsp;</P><P><SPAN>Brandy</SPAN></P> Wed, 12 Jan 2022 17:45:18 GMT brandyhinton 2022-01-12T17:45:18Z https://community.splunk.com/t5/Splunk-SOAR/REST-query-get-executed-from-a-playbook/m-p/580832#M760 <P>Hi All, I am writing a playbook that&nbsp;<SPAN>&nbsp;sends an automated email when a case is opened in phantom.&nbsp; &nbsp;I know&nbsp;If you are doing a manual promotion (via GUI), then you would need to have a REST query get executed from a playbook hitting the container endpoint and looking for "container_type": "case".&nbsp; Then you would just have a format block to populate the REST results and have a connected send email action via SMTP.&nbsp; what are the steps to get a REST query get executed?</SPAN></P><P>&nbsp;</P><P><SPAN>Brandy</SPAN></P> Wed, 12 Jan 2022 17:45:18 GMT https://community.splunk.com/t5/Splunk-SOAR/REST-query-get-executed-from-a-playbook/m-p/580832#M760 brandyhinton 2022-01-12T17:45:18Z