XDR - Confirm Incident
Details
This workflow updates an incident's status to Incident Reported, creates a chat room using a supported messaging integration, and then adds the incident's assignees to that room. If a room already exists, a new room is not created and the incident's assignees are re-added as needed. Supported messaging integrations include: Slack, Webex.
Targets: Automation APIs, Conure APIs, Platform APIs, Slack, Webex
Steps:
- Get a list of automation targets
- Update the incident's status to Incident Reported
- Identify the messaging integration to use (if none or more than 1, output an error)
- Parse the incident attributes and assignees
- Resolve each incident assignee to their email address
- For whichever messaging integration is configured:
- Create a chat room and post a welcome message (if a room doesn't already exist)
- Add each incident assignee to the chat room
- Check if a room was actually created:
- If so, add an external reference to the incident for the chat room