Skip to main content

Entity out fields which already coming with alerts of Cases

  • November 20, 2022
  • 3 replies
  • 5 views

Forum|alt.badge.img+5

Hello All, can we make an entity out fields which are already coming with alerts of Cases, for example I have an alerts where I want to make the recepient email an entity and go further, wondering how to proceed with it. some guidance would be appreciated. thanks

3 replies

Forum|alt.badge.img+9

@Mohammad_Sulaim , have you experimented with the "Create Entity" action? You can should be able to map a specific JSON field for the alert to the "Entity Identifies" field in the playbook action.

View files in slack


Forum|alt.badge.img+5

thanks, used the create entity one.


Forum|alt.badge.img+9

Happy to help, Mohammad!