Skip to main content

Hi,

I have a use case where an IP address is blocked based on the button clicked by the end user in an approval link. If the user declines, the playbook ends.

However, I also need to add a timeout that sends a follow-up email to the user. The problem is that both "decline" and "timeout" currently behave the same way in my flow.

Is there a way to separate these two flows so that the timeout triggers a different path from the decline?

I've attached an image of my current setup for better understanding. Any guidance would be appreciated!

 

Configure the approval and decline flows as you have them set up now. For the timeout flow, configure the follow up email and then configure the action timeout based on this - https://cloud.google.com/chronicle/docs/soar/respond/working-with-playbooks/using-actions-in-playbooks#:~:text=Optionally%2C%20%C2%A0enable%20Time,control%20the%20flow.


Reply