IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Evaluation order of Condition point (First true condition)

  • 1.  Evaluation order of Condition point (First true condition)

    Posted Tue September 07, 2021 11:03 PM
    I would like to confirm the evaluation order of  Condition point (First true condition) .

    If Condition Point settings are displayed with the following order,
       Condition1
       Condition2
       Else

    Can I suppose the conditions are always evaluated from top to bottom like displayed in Condition point detail?

    Condition1 -> Condition2 -> Else


    If both condition1 and condition2 are true, evaluation order will affect the playbook execution path.

    ------------------------------
    Yohji Amano
    ------------------------------


  • 2.  RE: Evaluation order of Condition point (First true condition)

    Posted Wed September 08, 2021 07:43 AM
    Your understanding is correct. The conditions are evaluated top to bottom.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message


Related Content