Phantom Tanium: 'Variables' in query action

[ng87]

Trying to use the "Run Query" action from the Tanium app.

The problem I am having is specifying the hostname to be searched.

For example, this should be the search that gets sent to the server :

Get Trace Executed Processes from all machines with Computer Name equals MyHostname1

Obviously, as this is part of the playbook I want the hostname to be filled in from the CEF|Artifacts field.
Does anyone know if this is possible?

Tried the below that didn't work:

  Get Trace ..................  equals artifact.*.cef.sourceHostName 

[ansusabu]

You can use format block for defining the query. like,

Get Trace Executed Processes from all machines with Computer Name equals {0}

and define parameter of the format block as 'artifact.*.cef.sourceHostName'