Add manual tasks and blank tasks ↗

Abstract

Using the Task Library, add manual tasks and or blank tasks.

Cortex XSIAM supports different task types for different actions to be taken in a playbook.

You can a manual task or a blank task from the Task Library.

Manual Tasks contains a list of playbooks from your Org repository with the manual tasks they contain. A manual task does not run a script and may require manual inputs. By default, they are ordered by latest updated playbook. You can also order the playbooks alphabetically.

From the Task Library pane, click Manual Tasks.
Click a playbook to view the tasks contained within that playbook.
Hover over the task you want and and drag it onto the playbook editor.
By default, a user icon ( ) indicates the task requires manual inputs. You can change the task settings to automate it.
Connect the playbook you added by dragging and dropping a wire.
Save the playbook.

A Blank Task can be used to create a custom task from scratch.

From the Task Library pane, click Blank Task.
In the Task Details pane, select the Task Type you want.
The following are the types of tasks you can create for your playbook.
- Standard task: Use a Standard task when an analyst needs to confirm information or escalate a case.
- Conditional task: Use a Conditional task to validate conditions based on values or parameters and take appropriate direction in the playbook workflow.
- Data Collection task: Use a Data Collection task to interact with users in your organization.
- Section Header: Use a Section Header task to group related tasks to organize and manage the flow of your playbook.
Enter a meaningful name in the Task Name field.
Configure the settings relevant for the task type you selected. For more information, see:
- Create a standard task
- Create a conditional task
- Create a communication task
- Create a section header
Click Save.
The task is added in the playbook editor.
Connect the tasks you've added in their logical order by dragging and dropping a wire from one task to another.
Save the playbook.