Skip to main content
Solved

Triggering Playbook on Case Closure in SOAR

  • September 24, 2024
  • 2 replies
  • 127 views

GaurangPatel
Forum|alt.badge.img+4

Hello team,

I would like to know if it is possible to trigger a playbook automatically when a user closes a case in SOAR. The use case involves syncing the case status with a third-party platform upon closure.

Alternatively, are jobs the only option for syncing data with external platforms?

Thank you in advance for your assistance!

Best answer by ankitsynx

Hey @GaurangPatel, there are couple of apps that allow synchronisation of case status with external tools using Jobs, I have used Service Now and Chronicle to synchronise these.

If you are looking to trigger playbooks on closure that is not a valid trigger for a playbook AFAIK. However, you can always add an action at the end of playbook before close case action to attach a playbook you intend to.

2 replies

ankitsynx
Forum|alt.badge.img+5
  • Bronze 5
  • Answer
  • September 24, 2024

Hey @GaurangPatel, there are couple of apps that allow synchronisation of case status with external tools using Jobs, I have used Service Now and Chronicle to synchronise these.

If you are looking to trigger playbooks on closure that is not a valid trigger for a playbook AFAIK. However, you can always add an action at the end of playbook before close case action to attach a playbook you intend to.


SoarAndy
Staff
Forum|alt.badge.img+12
  • Staff
  • September 27, 2024

As anktsynx said, many integrations have a Job that will handle this for you, if not you can look to duplicate one from somewhere or log a feature request. 

We don't have a way to trigger a playbook on state changes.. yet.