Skip to main content

Hello,

I want to send SecOps case alert to Slack, for this I have integrated slack channel with SecOps. But as per requirements main ask is to send Gemini summary of the case along with slack notification using playbook at runtime. But Gemini summary taking some time to generate, so I can't send it at runtime.

Is there any way to send Gemini summary at runtime to slack using playbook, immediately after creation of case in SecOps.

Thank you.

Hey @Akshay31 ,

Siemplify has a "Create Gemini Case Summary" action, would that work for your use case? You can add it to any playbook that you're creating:

From the results, you can determine which fields you care about and add them to your slack message:

 


Hello @_K_O ,

Thank you for reply.

I am not able to see "Create Gemini Case Summary" option while creating playbook

 

 


Hello @_K_O ,

Thank you for reply.

I am not able to see "Create Gemini Case Summary" option while creating playbook

 

 


Hi @Akshay31,

Have you upgraded the integration to the newest version?

If you have, you may need to speak to your CSE/Account Rep - I'm not sure if it's in open beta at the moment or not. 


Hi @_K_O ,

The integration is at newest version


I can confirm with v 94.0 "Create Gemini Case Summary” is available. ​@_K_O  have you tried ingesting the gemini case summary to Get Case Data JSON result file via SOAR playbook? 


@Qasim_k  I’m not sure that I understand the question - when selecting the Gemini Case Summary, it takes in the case data automatically:

 

 

You can also use the “Ask Gemini” action if you want to pass in specific case data from the “Get Original Alert Json” action:

 

 

Both of these seem to work when I tested them out, but if I’m misunderstanding the question, please let me know!


Reply