How to Use ifThenElse in Expression Builder to Check for Null or Empty Fields

I'm working with the Expression Builder in Google SecOps SOAR and trying to conditionally check if a field (e.g., block.action_Results1.JsonResult|"rows.data.text") is either null or empty.

I came across the ifThenElse(operator, comparedValue, trueResult, falseResult) function and want to use it to return a default value when the field is not populated.

Whatโ€™s the correct way to structure this check using ifThenElse? or is there any short way to achieve becase when block action is failed and send empty result, output writes syntax as it is and not keep it empty, so I have to make a check before !! (Can not use condition box as there are parallel action)

0 0 57
0 REPLIES 0