I have a playbook where I need to send a message to a user with approval links. Sometimes the user will not look at the message, so if there is no response, I would like to resend the message after a 4 hour wait. Sending the message is easy, but how can I monitor for their response and resend if needed?
Question
SOAR Monitor User Response
+11Take a look at how this set up works to see if it can help get you past this:
SecOps Adoption: Understanding Integrations Actions in Depth
Look at the Playbook Workflow section particularly the Wait for User Reply Action explanation
+11Whoops - did not understand Slack was part of this. There is a Slack integration in the Marketplace that has a "Wait for Reply with Webhook" action that sounds like what you need.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.