Hi everyone!
I have created a draft workflow to test it’s trigger condition which is on InsightIDR –> Get New Investigations, and I have set the condition in this way: [{"field":"title","operator":"EQUALS","value":"Microsoft Defender for Cloud Apps - C2C - Adminsitrative Activity from a non-corporate IP address"}]. We have investigations created with that title in huge number. But, the workflow didn’t trigger for any of them.
What might be the issue here?
Thank you!!
Move to API; I gave up on this a while ago.
As per Information I have, When the workflow’s trigger point is created with InsightIDR version 12.0.0, the workflow will work. When plugin’s version is higher than workflow won’t trigger. Looks like the problem is with plugin itself.
Try with 12.0.0 it should work.
How do you change the insightIDR version?
This user is right, using an older version of the template with an older plugin works perfectly. I’ll have to do some more digging. The monitor for changes workflow still doesn’t trigger but I think I’m close to the end of this mystery
