Skip to content

Commit 8bfbb12

Browse files
wjakeleejpipkin1kimsauce
authored
Update automation-service-playbooks.md (#4968)
* Update automation-service-playbooks.md add note to playbook payloads section * Update docs/platform-services/automation-service/automation-service-playbooks.md Co-authored-by: Kim (Sumo Logic) <[email protected]> --------- Co-authored-by: John Pipkin (Sumo Logic) <[email protected]> Co-authored-by: Kim (Sumo Logic) <[email protected]>
1 parent ee9129a commit 8bfbb12

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

docs/platform-services/automation-service/automation-service-playbooks.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -244,9 +244,13 @@ You select the initial object to use for the payload when you [create a playbook
244244
* **Insight**. An [Insight](/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui/) from an [automation in Cloud SIEM](/docs/cse/automation/automations-in-cloud-siem/).
245245
* **Entity**. An [entity](/docs/cse/records-signals-entities-insights/view-manage-entities/) from an [automation in Cloud SIEM](/docs/cse/automation/automations-in-cloud-siem/).
246246
* **Alert**. An [alert](/docs/alerts/) from an [automated playbook in a monitor](/docs/alerts/monitors/use-playbooks-with-monitors/).
247-
* **Parse from json**. A payload from a [parent playbook](/docs/platform-services/automation-service/automation-service-playbooks/#add-a-playbook-node-to-a-playbook). (You can also select this option if you want to pass a custom payload from an alert.)
247+
* **Parse from json**. A payload from a [parent playbook](/docs/platform-services/automation-service/automation-service-playbooks/#add-a-playbook-node-to-a-playbook). You can also select this option if you want to pass a custom payload from an alert.
248248
* Leave blank if the trigger will be a Cloud SOAR [incident or triage](/docs/cloud-soar/incidents-triage).
249249

250+
:::note
251+
If you are using [nested playbook nodes](/docs/platform-services/automation-service/automation-service-playbooks/#add-a-playbook-node-to-a-playbook), then you will need to configure the parameters of the Start Node in the child playbook to include the outputs of the parent playbook that are passed to the child playbook. It is not recommended to use parameter arrays (for example, `signals[].id`) as the Start Node parameters for the child playbook; you should use a standard parameter names instead (for example, `signals.id`).
252+
:::
253+
250254
Following are examples of payloads from different trigger types:
251255
* [Alert payload](#alert-payload)
252256
* [Entity payload](#entity-payload)

0 commit comments

Comments
 (0)