Skip to main content

Is it possible to get the user who ran a playbook from within that playbook?

  • June 13, 2023
  • 5 replies
  • 31 views

Forum|alt.badge.img+1

Is it possible to get the user who ran a playbook from within that playbook?

5 replies

Dmitry_Sarakeev
Staff
Forum|alt.badge.img+9

checking


Dmitry_Sarakeev
Staff
Forum|alt.badge.img+9

If you mean the user that attached a playbook to an alert that would be only in the audit log.
However it is possible to get the user that ran a manual action in a playbook (pressed the execute button) inside the python code by calling:

siemplify.original_requesting_user


Forum|alt.badge.img+9
  • New Member
  • June 13, 2023

@Dmitry_Sarakeev Is it possible to get the user that submitted an answer to a multiple choice question block? I'd like to be able to have the analyst's name in a follow on action. Something like, "Case was closed by [Analyst] as a false positive."


Dmitry_Sarakeev
Staff
Forum|alt.badge.img+9

checking


Dmitry_Sarakeev
Staff
Forum|alt.badge.img+9

getting back on this, currently it is not supported