Skip to content

Commit 1a29d35

Browse files
authored
Add note (#5322)
1 parent 37eb7b7 commit 1a29d35

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

docs/platform-services/automation-service/automation-service-playbooks.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -131,9 +131,10 @@ For examples of adding conditions to playbooks, see the [Cloud SIEM automation e
131131
1. Click **Get Value** and select from the drop-down menu whether the value will evaluate to **true (bool)**, **false (bool)**, or **empty**. You can also manually enter a value, such as a string or numeric literal.<br/><img src={useBaseUrl('img/cse/automations-add-condition-node-2.png')} style={{border:'1px solid gray'}} alt="Get values for the condition" width="500"/>
132132
1. Under **Get value from a previous action**, select the value to feed into the condition. The example shows **Get Devices** and **Playbook inputs** that came from the previous action. (The condition must be linked by a line to the previous action node to receive outputs from the action.) Click the options from the previous action and select which output type (for example, hashes, IP addresses, domains) to evaluate and add it to the condition.
133133
1. The selected output type will be displayed under **Condition 1**. Select which condition you would like for the output results to meet from the inequality operators below and click **Select a value** to define the condition.
134-
1. Now that **Condition 1** is defined, you can choose to filter your
135-
results further by selecting an **AND/OR** operator to define another
136-
condition.
134+
1. Now that **Condition 1** is defined, you can choose to filter your results further by selecting an **AND/OR** operator to define another condition.
135+
:::warning
136+
If you define multiple conditions, all the conditions must be filtered with either **AND** or **OR**. If some are filtered with **AND** and some with **OR**, then the condition evaluation will fail.
137+
:::
137138
1. Click **Update**.
138139
1. When you create a new condition, you need to define what happens when the results meet one of your criteria. Draw lines to nodes to define the flow for success, failure, or other condition options.
139140

0 commit comments

Comments
 (0)