Input WHOIS plugin


I want to use the output generated from the Multiple Country Authentications alert as input for the WHOIS IP Lookup plugin. When I use {{[“UBA - Trigger”].[contents].[ipAddresses]}} as input, the whole array is used).
whois input

Does anybody know where to start how to split this array, so only the IP addresses are used as input?


You need to choose a loop step.

When you choose a loop step it provides the list of available arrays you can loop over.
Select the IP Array

Within that loop you will add a whois lookup step. IP address should now be an option for you to pick, and it will loop through each IP in the array. Let me know if you have any other questions.

Screenshot 2024-06-25 at 10.10.43 AM

Screenshot 2024-06-25 at 10.16.06 AM

Hi @darrick_hall1,

I tried the loop step before but for some reason it didn’t work for me. With the steps mentioned above it works! Thanks for your assistance!
I can continue with building my flow.


No worries at all. Glad it is working.