Can Alert Playbooks be triggered by Case Stage changes (Investigation / Research)?

Hello everyone,

I'm trying to build a Google SecOps SOAR integration with Freshdesk using HTTPv2.

My goal is to automatically create a Freshdesk ticket when a case is moved to either:

• Investigation
• Research

I created an Alert Playbook with a Custom Trigger configured as:

[Case.Stage] = Investigation
OR
[Case.Stage] = Research

The playbook contains a simple HTTPv2 action that should create a ticket in Freshdesk.

The playbook is enabled and saved. I also verified that the case stage is successfully changed, for example:

"Case stage set to Investigation"

However, the playbook never executes when the case stage changes.

From the documentation and community posts, I understand that Alert Playbooks can access Case fields (Case.Stage, Case.Name, Case.Tags, etc.), but I'm not sure whether a Case Stage change is actually considered a trigger event for an Alert Playbook.

My questions are:

1. Can an Alert Playbook be triggered directly by a Case Stage change?
2. Is a Case Stage change only evaluated when a new alert enters the case?

My objective is:

1. Case moved to Investigation/Research
2. Execute Playbook
3. Create Freshdesk ticket via HTTPv2

Any guidance or examples would be greatly appreciated.

Thank you.