Configuring tasks using variables
Variables can be used when configuring playbook tasks. There are two types of playbook variables, including output variables and trigger variables.
Output variables allow you to use the output from a proceeding task as an input to the current task. For example, the report generated in one task can be attached to an incident in a second task. For a list of output types, see FortiSoC > Automation > Connector. A task ID is created automatically for each task added to the playbook.
Output variables use the following format:
Trigger (incident and event) variables
Trigger variables allow you to use information from the trigger (starter) of a playbook when it has been configured with an incident or event trigger.
For example, the Run Report action can include a filter for the endpoint IP address from the event that triggered the playbook.
Trigger variables use the following format: