I have an active playbook that runs on most event types, but some get auto-closed and I would like to know if there's a way to end the playbook run if it the case gets closed before it finishes the playbook run.
... View more
I am not sure about using the rest endpoint to do it but there is a direct phantom api that allow you to add to the event called phantom.vault_add
... View more
There is an action for the phantom app to update artifact tags. I am not sure which version of the phantom app you are using but that may solve your problem if you add that to your playbook.
... View more
I am writing a playbook that loops through a list of case ids to delete. This action fails after hitting 50 for the action and I have written in my playbook to continue if there are still valid ids left in the list. However, after the failed it won't continue down to the code to what I have written down below to remediate. How can I get the playbook to continue after a failed action and just mark it failed rather than exiting the playbook?
... View more