IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Evaluation order of Condition point (First true condition)

  • 1.  Evaluation order of Condition point (First true condition)

    Posted Tue September 07, 2021 11:03 PM
    I would like to confirm the evaluation order of  Condition point (First true condition) .

    If Condition Point settings are displayed with the following order,
       Condition1
       Condition2
       Else

    Can I suppose the conditions are always evaluated from top to bottom like displayed in Condition point detail?

    Condition1 -> Condition2 -> Else


    If both condition1 and condition2 are true, evaluation order will affect the playbook execution path.

    ------------------------------
    Yohji Amano
    ------------------------------


  • 2.  RE: Evaluation order of Condition point (First true condition)

    Posted Wed September 08, 2021 07:43 AM
    Your understanding is correct. The conditions are evaluated top to bottom.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------