need to write a custom job for action failures in a playbook

[Nagarjuna1115]

Team,
My instance is multitenant , i have updated the Actions Monitor code , in the receipients i given my mail address im getting notifications to my email for all accounts hosted in that instance. I need action failures specific to my environment. is there any endpoint to get environment names for that instance. How to set a condition like environment name or tenant id in Actions Monitor code. Could you please assist

[kentphelps]

There isn't a dedicated API endpoint to retrieve environment names for a multi-tenant Chronicle SecOps SOAR instance. However, the environment name is often passed as a parameter within connectors and jobs.

To filter action failures based on your environment, you'll need to examine the Actions Monitor code and identify where the environment information is stored. It's likely passed as a parameter to the connector or job that triggered the action. You can then add a condition in your Actions Monitor code to check if this parameter matches your environment name.

For example, if the environment name is stored in a variable called environment, you could add a condition like:

if environment == "your_environment_name":
    # Process action failure

You may also need to review the connector or job configuration to determine the exact name of the environment parameter.

[Nagarjuna1115]

Hello Kent,
I could'nt find a parameter like environment in Actions monitor code under siemplify integration. Could you please share screenshot if you have any.
Thanks!