Hi,
I need to automate ldap search and other functions whenever, for example, an incident that comes from qradar has a string or user account. I tried to create a rule that calls the workflow responsible but it was not triggered. Attached is the image of the rule
------------------------------
Vítor Fagundes Alves Nogueira
------------------------------