Skip to main content

Hello,

I have a question about the "Quick Action" Feature. 

I understand that you can use quick action buttons linked to integration actions. But is there a way to link it to a playbook block? 

I tried using the "Attach playbook to alert" But this workaround does not allow for custom input for the playbook.


Is this something that is on the road map for the "Quick Actions"?

https://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/quick-actions?hl=en

Hey @mokatsu ,


In Tools powerup, we also have an action called "Add Playbook To Alert". It works differently from the one in Siemplify integration. It allows you to provide a custom name via String parameter. I've tested it and it works for blocks as well.



 


Hey @mokatsu ,


In Tools powerup, we also have an action called "Add Playbook To Alert". It works differently from the one in Siemplify integration. It allows you to provide a custom name via String parameter. I've tested it and it works for blocks as well.



 


What about the input for the block, where would i provide them? Or during the quick action execution will it open another modal for the block inputs?


What about the input for the block, where would i provide them? Or during the quick action execution will it open another modal for the block inputs?


Hey @mokatsu ,


If you need to provide an input, then you would need to wrap a block inside playbook and then set the block to be a manual step. That way before block execution, you will be asked to manually provide the inputs.


Here are some screenshots:





 


Hey @mokatsu ,


If you need to provide an input, then you would need to wrap a block inside playbook and then set the block to be a manual step. That way before block execution, you will be asked to manually provide the inputs.


Here are some screenshots:





 


I do want to say, I am accepting this solutions as a work around not a solution. I do believe the quick actions should be extended to also user playbook blocks at the least.


Reply