Skip to main content
Question

SLA pause notes in casewall

  • February 19, 2026
  • 1 reply
  • 37 views

Ravi0410
Forum|alt.badge.img

Whenever we add comments while pausing the Case SLA, those comments do not appear in that alert's Case Wall. is there way to we can add those comments to the Case Wall too?

Also if SLA paused for a particular case, How to deduct the duration from MTTC

1 reply

AnimSparrow
Forum|alt.badge.img+6
  • Bronze 2
  • February 21, 2026

You can have multiple options to do that. I am not sure if this is the easiest and best but:


1st. - re-write app to have this option:
go to IDE > create action > name it same way that you will be able to distinguish and use this code

(copied original one + combined the one from “Case Comment”)
 

from __future__ import annotations

from TIPCommon.base.action import Action
from TIPCommon.extraction import extract_action_param
from TIPCommon.rest.soar_platform_clients.api_client_factory import get_soar_client

from consts import PAUSE_CASE_SLA_SCRIPT_NAME

ERROR_MESSAGE = f"Error executing action {PAUSE_CASE_SLA_SCRIPT_NAME}."


class PauseCaseSLA(Action):
def __init__(self) -> None:
super().__init__(PAUSE_CASE_SLA_SCRIPT_NAME)
self.error_output_message = ERROR_MESSAGE

def _init_api_clients(self):
"""
Initializes API clients if needed.
The SOAR client is fetched dynamically in _perform_action.
"""
pass

def _extract_action_parameters(self) -> None:
"""
Extracts parameters from the IDE/Integration UI.
"""
# This parameter is used for the SLA pause logic
self.params.message: str | None = extract_action_param(
siemplify=self.soar_action,
param_name="Message",
print_value=True,
is_mandatory=False,
default_value=None,
)

# This parameter is used for the Case Comment
self.params.comment: str | None = extract_action_param(
siemplify=self.soar_action,
param_name="Comment",
print_value=True,
is_mandatory=False,
default_value=None,
)

def _perform_action(self, _=None) -> None:
"""
Main execution logic: Pauses SLA and adds a comment.
"""
# 1. Pause the Case SLA using the SOAR client
response = get_soar_client(self.soar_action).pause_case_sla(
case_id=self.soar_action.case_id,
message=self.params.message
)
response.raise_for_status()

# 2. Add a comment to the Case wall
if self.params.comment:
self.soar_action.add_comment(self.params.comment)
comment_status = f"Comment added: {self.params.comment}"
else:
comment_status = "No comment was provided."

self.output_message = f"The Case SLA was paused successfully. {comment_status}"


def main() -> None:
# Action execution entry point
PauseCaseSLA().run()


if __name__ == "__main__":
main()

2nd - build a playbook that first executes the 'Pause Case/Alert SLA' action, followed by a 'Case Comment' action using the comment gathered from the initial step. In the main playbook view, add a Quick Action widget and create a button to attach this playbook. Name it 'Pause SLA'. This way, when someone executes it, they will receive a prompt similar to the original action, but the Case Wall will also be updated automatically.