The Data Collection task is a multi-question
survey (form) that survey recipients access from a link in the message.
The survey resides on an external site that does not require authentication,
thereby allowing survey recipients to respond without restriction.
responses are collected and recorded in the incident's context data,
whether you receive responses from a single user or multiple users.
This enables you to use the survey questions and answers as input
for subsequent playbook tasks.
You can include two types of
questions in the survey; stand-alone questions and questions based
on a Cortex XSOAR field.
Stand alone questions are
presented to users directly in the message, and from which users
answer directly in the message (not an external survey).
Field-based questions are based on a specific Cortex XSOAR
field (either system or custom), for example, a Grid field. Questions
The response (data) received for these fields automatically populates
the field for this incident in Cortex XSOAR.
can collect responses in custom fields, for example, a Grid field.
If responses are received from multiple users,
data for multi-select fields and grid fields are aggregated. For
all other field types, the most recent received response will override
previous responses as it displays in the field. All responses are
always viewable in the context data.
In a playbook, click
+ Create Task
Enter a meaningful name for the task that corresponds
to the data you are collecting.
Determine how the message will appear to users and how
the message or survey will be sent.
The survey does not appear in the message. A link to the
survey is automatically placed at the bottom of the message.
Enter the questions that the survey will contain.
You create questions in the survey, you can drag-and-drop
questions to rearrange the order in which they display in the survey.
To customize the look and feel of your
email message, click
You can determine the color scheme and how text in the
message header and body appear, as well as the appearance and text
of the button the user clicks to submit the survey.