Hello All, can we make an entity out fields which are already coming with alerts of Cases, for example I have an alerts where I want to make the recepient email an entity and go further, wondering how to proceed with it. some guidance would be appreciated. thanks
Page 1 / 1
@Mohammad_Sulaim
, have you experimented with the "Create Entity" action? You can should be able to map a specific JSON field for the alert to the "Entity Identifies" field in the playbook action.
View files in slack
thanks, used the create entity one.
Happy to help, Mohammad!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.