Skip to content

Commit 04bb771

Browse files
jpipkin1kimsauce
andauthored
Add more information to the user choice documentation (#5838)
* Add to user choice section * Update docs/platform-services/automation-service/playbooks/create-playbooks.md Co-authored-by: Kim (Sumo Logic) <[email protected]> --------- Co-authored-by: Kim (Sumo Logic) <[email protected]>
1 parent c3e5977 commit 04bb771

File tree

2 files changed

+13
-1
lines changed

2 files changed

+13
-1
lines changed

docs/platform-services/automation-service/playbooks/create-playbooks.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -168,10 +168,22 @@ When a user choice node is encountered, the execution will pause until a user se
168168
1. Select **Expires** if you want the user choice to expire after a set amount of time so that the playbook can proceed when no choice is made. If you do not select **Expires**, the playbook does not proceed until the user makes a choice. If you select **Expires**, fill out additional fields for the amount of time to pass before expiration, and the **Default answer** to automatically be chosen at the end of the expiration period.
169169
1. Click **Create**.
170170

171-
Following is an example of a user choice node. Note the the node branches to the next node depending on the user's answer.
171+
#### Example user choice node
172+
173+
Following is an example of a user choice node. Note the node branches to the next node depending on the user's answer. In this example, if the user selects **Yes**, then the IP is blocked, but if the user selects **No**, an email is sent to the SOC.
172174

173175
<img src={useBaseUrl('img/cse/automations-example-user-choice-node.png')} style={{border:'1px solid gray'}} alt="Example user choice node" width="500"/>
174176

177+
#### User choice nodes in out-of-the-box playbooks
178+
179+
Here are just a few of the [out-of-the-box playbooks](/docs/platform-services/automation-service/playbooks-in-app-central/) that contain user choice nodes. Look at the user choice nodes in these playbooks to get an idea of how to structure them:
180+
* 18 - DDoS
181+
* 21 - DLP Alert
182+
* 24 - DoS with Decision Tree
183+
* 59 - Outbound Network Investigation
184+
* 87 - Unauthorized Access w/ Privilege Escalation
185+
* 88 - User Account Investigation Active Directory
186+
175187
### Add a playbook node to a playbook
176188

177189
Define a playbook to run inside another playbook. For example, you may want to call another playbook in response to a [condition](#add-a-condition-node-to-a-playbook) statement.
98.6 KB
Loading

0 commit comments

Comments
 (0)