Thanks to all for the input. Let me give you an example of the use case, we have a playbook that allows analysts to search an IP address, and it will query multiple security tools to collect endpoint information. Since this is a point-in-time search, the IP could be assigned to a different host after the attack. This dialog box will include a message to the analyst to ensure they correlate the events with the alert timeframe to ensure they have the correct endpoint informaton.
I did a test to create a form with the HTML block at the "Artifact activated" starting point. I am able to see the message displayed on screen when I run the playbook, but after I click "Execute", the playbook is stuck in a running state. Am I missing a step?
------------------------------
Raymond Tam
------------------------------
Original Message:
Sent: Wed August 28, 2024 01:22 PM
From: Pierre Dufresne
Subject: Display a pre-defined message on screen when execute a playbook
HI Raymond,
If it is a manual playbook, you could configure an Activation form with an HTML block. This method would allow you to display a fixed message when the playbook is started. I am saying fixed because activation form are used to ask information from the user. The content of the activation form cannot be changed before it is displayed. But I am guessing this will not solve your usa case.
By the way, I submitted a similar suggestion in the IBM Ideas website. In may 2022.
------------------------------
Pierre Dufresne
Original Message:
Sent: Tue August 27, 2024 07:53 PM
From: Raymond Tam
Subject: Display a pre-defined message on screen when execute a playbook
Is it possible to display a predefined message on-screen when executing a manual playbook?
The goal is for a pop-up message to appear with additional information about the playbook.
Once the analyst closes the pop-up message, the playbook will continue to run.
------------------------------
Raymond Tam
------------------------------