
Hi
LogPoint documentation on SOAR Playbook trigger can be found following below link.
Playbook Triggers — Playbooks latest documentation (logpoint.com)
Under ‘Trigger’ definition you can use following statement
SELECT * FROM LogPoint WHERE alertrule id LIKE %xxxxxxxxxxxxxx%
The AlertRule ID can be found clicking the “I” sign at the right side your alertrule.
1 comment