@phanTom  Thank you, I understand everything but I think that if someone put a limit of 1000 there should be a reason so I did not even suppose to go to remove that limit... If I do that it is very likely that I shorten and simplify my use case but break all the other actions of the app.  I understand that for cycles cannot be done easily generally speaking, but I prefer to go for the longer way rather than remove "limits" from software not written by me. Thank you for your help! ... View more

@phanTom  sorry but are you saying that it is written that cannot be used within a custom function but instead you use it and it works? I am trying to delete all the emails contained in a precise folder of a precise mailbox (much more than 1000. 1000 is the number that I found to be the undocumented number of emails that the EWS on-premise App can retrieve from a folder of a mailbox, indeed i made another question on this community for that topic) in one single container. Given that the upper limit is 1000, I am forced to cycle on the actions needed (run query, delete email) until the run query returns 0 emails. This is how the questions came up to me but now I am generally interested in how to implement "for cycles" is a single playbook as they would very useful for other use cases. Thank you   ... View more

@phanTom  thank you. Now I got the point.   Going back to last residual questions (and I will stop annoying you then :D): You said to me that I need a custom function to save an object but in the documentation you sent to me (Data management automation API - Splunk Documentation) it is written "The save_object API is not supported from within a custom function". So, how I am supposed to use it? Where can I save an object in the code of a playbook? Going back to the for cycle, what is the best way to implement it, according to your experience? Thank you ... View more

@phanTom  I am still not precisely understanding. I have clear the behaviour if only the Container ID is specified as context (Its scope will be within that container ID and its "life" will be more or less the same of the container), but what happens to the object if I do specify only a Playbook name? What will the scope of the object and its "life" be? It will live along all that Playbook runs? ... View more

Dear Phantom, as written before, I understand what you meant. Please navigate to the first URL provided by you (https://docs.splunk.com/Documentation/Phantom/4.10/PlatformAPI/RESTContainers) then press CTRL + F (find something in the page) then look for "DELETE": there are no results. My question is: where this information (i.e. use an HTTP DELETE to achieve Container deletion) is written? Is it so obvious so that it is it left as an implicit information? ... View more

@phanTom , what if I specify only a playbook as context? Do I achieve the "cross-containers" variable? If yes, how this object can be reset to its original value?   For what concerns for-cycles I'm just designing some use-cases but I have still not yet developed them. I would need a for cycle (i.e. some actions repeated on the same container until a condition is met) and I was just guessing how to achieve it (if possible).   Thank you ... View more

Dear Tom, thank you. I understand what you are writing and I would accept it as a solution but I cannot find any reference to DELETE requests in the link provided by you. Where it is written? Thank you again ... View more

Dear Tom, thank you. So just to recap and chech if I correctly understood: I can save a variable with the save_object() API and this can be done only through custom functions of a playbook right? I can save a variable with the save_object() and decide to set its context to be a playbook or a container, right? If the context is a container, that is fine since every playbook run on a now container will deal with a new_object (to be deleted optionally setting auto_delete=true) but what happens when saving the object in a playbook context? It is mantained cross-playbook until explicitly deleted or reset? For what concerns for-cycle I can trivially use a Decision block followed by some actions and link the last action back to the Decision block so that the desired actions run until a the condition in the decision block is met, right? Thank you again   ... View more

Thank you! ❤️   ... View more