Contents Security Operations Previous Topic Next Topic Sightings Search - Determine Observables activity Subscribe Log in to subscribe to topics and get notified when content changes. ... SAVE AS PDF Selected Topic Topic & Subtopics All Topics in Contents Share Sightings Search - Determine Observables activity The Sightings Search - Determine Observables workflow activity determines which observables to include in the workflow. The Sightings Search - Determine Observables activity can be used with any workflow to determine which observables to include in the workflow. Results Possible results for this activity are: Table 1. Results Result Description Success Found observables Failure No observables found. More error information is available in the activity output error. Input variables Input variables determine the initial behavior of the activity. Variable Description task_sys_id Task identifier (maps security incident to observables). observables IP addresses, hash, URLs, domain names. workflow_current_sys_id System identifier of the current record. (Used only if task_sys_id, observable inputs are not available. Output variables The output variables contain data that can be used in subsequent activities. Table 2. Output variables Variable Description observables Filtered observables On this page Send Feedback Previous Topic Next Topic
Sightings Search - Determine Observables activity The Sightings Search - Determine Observables workflow activity determines which observables to include in the workflow. The Sightings Search - Determine Observables activity can be used with any workflow to determine which observables to include in the workflow. Results Possible results for this activity are: Table 1. Results Result Description Success Found observables Failure No observables found. More error information is available in the activity output error. Input variables Input variables determine the initial behavior of the activity. Variable Description task_sys_id Task identifier (maps security incident to observables). observables IP addresses, hash, URLs, domain names. workflow_current_sys_id System identifier of the current record. (Used only if task_sys_id, observable inputs are not available. Output variables The output variables contain data that can be used in subsequent activities. Table 2. Output variables Variable Description observables Filtered observables
Sightings Search - Determine Observables activity The Sightings Search - Determine Observables workflow activity determines which observables to include in the workflow. The Sightings Search - Determine Observables activity can be used with any workflow to determine which observables to include in the workflow. Results Possible results for this activity are: Table 1. Results Result Description Success Found observables Failure No observables found. More error information is available in the activity output error. Input variables Input variables determine the initial behavior of the activity. Variable Description task_sys_id Task identifier (maps security incident to observables). observables IP addresses, hash, URLs, domain names. workflow_current_sys_id System identifier of the current record. (Used only if task_sys_id, observable inputs are not available. Output variables The output variables contain data that can be used in subsequent activities. Table 2. Output variables Variable Description observables Filtered observables
