Skip to main content

Workflow creation guidelines

Workflow graph​

  1. For workflows that start in Current tab, make sure the URL example and start URL pattern are set.
    • URL example - A url where the workflow can be triggered (e.g. a specific incident page in Cortex XSOAR). Should be taken from recordings.
    • URL pattern - responsible for the validation that workflow is triggered in the correct page. Keep in mind that if you put a bad pattern, it will prevent the analyst from running the workflow.
  2. Note which skills are required (cannot be skipped). Risky skills should be skippable if the workflow allows it.
  3. Avoid different skills having the same output name (e.g. 2 skills having a 'User' output). The values get aggreagated under the 'User' key which may be confusing in terms of other skills being run on the 'User' values.
  4. Give indicative names to custom outpus (FileName instead of File, EmailBodyURL instead of URL)
  5. Most skills are "foreach-able"
    • This means that if a skill recevies a list of inputs, it will run on each input separately
    • If a skill receives more than 1 input, it will run on all posibble pairs of the inputs
    • Take this into account and conisder how this affects the logic of the workflow