When defining a task, you can decide if the playbook continues, stops, or continues on an error path.
You can determine how the playbook behaves if there are script errors during execution.
When defining a standard task that uses a script or a conditional task that uses an script, you can define how a playbook task continues by selecting one of the following options:
Stop: The playbook stops, if the task errors during execution. For example, if the task requires a manual review, you may want the playbook to stop until completion.
Continue: The playbook continues to execute if the task errors. For example, the playbook task requires EWS, but EWS is not required for the playbook to proceed.
Continue on error path: If a task errors, the playbook continues on an error path.
The error path may be useful if you want to take action on an error, like clean-up, retry, etc. You may also want to handle errors in different ways. For example, in case of a quota expired error you may want to retry in 1 minute, but if you receive an internal error 500, you may want to stop the playbook.
You may want to create a separate path when an analyst manually reviews the incident and research is needed outside Cortex XSOAR. Once an analysis is complete, you can add a task to consider escalating to a customer and, if so, generate a report which can be attached to a ticket system such as Jira or ServiceNow.
Instead of a playbook waiting on manual input, which displays an error state, such as missing an argument in a script, you can add a separate path for these kinds of issues.
Note
Use the GetErrorsFromEntry script (part of the Common Scripts Pack) to check whether the given entry returns an error and returns an error message. For example, when using the script in a playbook, you can fetch the error message from a given task, such as a runtime error. You can then add a step in the playbook flow to send those error messages to the relevant stakeholder through Slack, email, opening a Jira ticket, etc.
When errors are created, they are added to context under task.id.error.
When adding the connector from this task to the following task, a dialog box appears which enables you to select one of the following paths:
In a playbook, edit or create a new task by clicking +.
If the task library is expanded, click + Create Task.
Select the task type you want to create or edit.
Note
You can set up script error handling when running a script in a Standard task or a Conditional task. For more information about error handling settings for these tasks, see Playbook tasks.
Built-in Conditional tasks have On Error settings for number of retries and retry interval, but not Error Handling.
For new tasks, in the Task Name field, type a meaningful name for the task that corresponds to the data you are collecting.
Click the On Error tab.
In the Number of retries field, type the number of times the tasks attempts to run before generating an error.
In the Retry Interval (seconds) field, type the wait time between retrying the task.
In the Error Handling field, select one of the following:
Stop
Continue
Continue on error path(s)
Click Save.
When adding the connector from this task to the following task, a dialog box appears which enables you to select one of the following paths:
Standard Path: When adding a task to this path, it executes without any exceptions.
If you select the Standard Path, the task continues on this path and executes without exceptions.
Error Path: When adding a task to this path, it executes where the source task errors during execution.
If you select Error path, if the task errors, the playbook continues with this path.