checking

If you mean the user that attached a playbook to an alert that would be only in the audit log.

However it is possible to get the user that ran a manual action in a playbook (pressed the execute button) inside the python code by calling:




siemplify.original_requesting_user

@Dmitry_Sarakeev
Is it possible to get the user that submitted an answer to a multiple choice question block? I'd like to be able to have the analyst's name in a follow on action. Something like, "Case was closed by [Analyst] as a false positive."

checking

getting back on this, currently it is not supported