Create a loop in a playbook

Hello,

Is there any way to create a loop action inside the SOAR playbook?

 

0 2 100
2 REPLIES 2

What specific use case would there be for a loop?

In cases where I need something to happen over X amount, I'll make a custom IDE action for it.

You could attach the same playbook after some *if* condition so it repeats and then pull a value from a global list, but I don't use the global list feature so I am not too sure how that would be implemented. 

Well, kind of. Just not within the same playbook.

For instance, I have a playbook that gets a suspicious file from an endpoint, but what if the endpoint is offline?

I created a duplicate of the Playbook. If the host is offline playbook one will delay for 8 hours then call playbook two.

Playbook two will check and if the host is offline delay eight hours and call Playbook one.

10 times is the max any playbook can run