Skip to main content

Cyware Orchestrate

Manage Output of a Playbook Node

The output retrieved after a Playbook node execution can either be viewed as is or filtered to view the specific set of data. You can perform one of the following actions for the output of a Playbook node:

  • Retrieve all the fields from the output of a Playbook node

  • Filter the output to fetch only a specific set of fields using a dynamic path

If a sample output of a Playbook node has the following fields, then you can use ${data::results::*::unique_id}dynamic path to select a required value (or list of values) and save the results as outputs to be passed to another Playbook node.

{
    "instance": {
        "data": {
            "results": [
                {
                    "level": "Medium",
                    "phase": "Detection Analysis",
                    "title": "Qradar - VPN SSF Credential Sharing",
                    "status": "open",
                    "created": "2021-03-15T20:37:05.004612Z",
                    "unique_id": "cda3057a-fdxxud-4fec-ad66-ccxxxeb9efcf",
                    "level_data": {
                        "order": 2,
                        "is_active": true,
                        "unique_id": "b2xxxec2-52c2-4xx-8e8b-cce1fbca64ed",
                        "option_name": "Medium"
                    }
                }
            ]
        },
        "status": 200
    }
}

Note

A dynamic path to save a node output does not require node reference number and app instance as parameters.

To filter the output of a Playbook node:

  1. Click Main Menu and select Manage Playbooks.

  2. Open an existing Playbook or create a new Playbook.

  3. Double-click on a required Playbook node.

  4. Go to Setup Output Data and select Save Customised Results.

  5. Enter a dynamic path expression in the required field to filter the node output.