when you say "Playbook that takes email addresses associated with an Incident", which incident would that be ? Do I need to create a separate analytics rule for it ?
No, it's a Playbook that is run against the Incident that has already been created by any Analytics Rule that has already run. After you install the Playbook linked in the article it will be available in the list of Playbooks to run in the dropdown for the Incident Actions in each Incident.
I hope that makes sense. I'd attach a screen capture, but threads here don't allow that.
when you say "Playbook that takes email addresses associated with an Incident", which incident would that be ? Do I need to create a separate analytics rule for it ?
No, it's a Playbook that is run against the Incident that has already been created by any Analytics Rule that has already run. After you install the Playbook linked in the article it will be available in the list of Playbooks to run in the dropdown for the Incident Actions in each Incident.
I hope that makes sense. I'd attach a screen capture, but threads here don't allow that.
i have error while deploying the connector. Is there anyway I can connect with you privately ?