Email Steps

Use the Email step to automatically send an email to the user(s) identified in the step. The email can include either static criteria or dynamic data relevant to the record that triggered the playbook. If the email needs to reflect entity-specific data, use dynamic values in the fields.

To add an Email step:

1. In the Playbook Designer, from the Select Step pane, choose Send Email.

2. In the Step Name field, type the name of the step.

3. (Optional) Click Add Description to add a description for the step.

4. From the Select Target field, select whether you want to run the action on the Self Agent node that is configured by default on FortiSIEM or some other custom agent that you have configured.

5. From the Configuration field, select the configuration name using which you want to run the action.

   You can create multiple configurations while configuring the connector.

6. From the Action field, select the action that you want to perform:

   • Send Email (Advanced): Choose this option to send an email with Jinja and email template support. This allows you to customize the email body type, content, and other input parameters. You can send the email in one of the following formats:

     Plain Text: A simple, unformatted email.

     Rich Text: An email with formatted content, images, and custom Jinja expressions using dynamic values.

     Email Template: Choose an existing email template to build upon, ensuring consistency and avoiding unnecessary rework.

     Recipients can be specified as:

     • A comma-separated list of email addresses, including those of non-FortiSIEM users.

     • The IRI values for users and/or teams, which allows reuse of user/team information from previous playbook steps as Jinja statements.

     • Select FortiSIEM users/teams by choosing from a pre-populated drop-down list containing 30 most recently created users/teams in the To, CC, and BCC fields. This allows users to dynamically utilize the email IDs already provided in user or team records.

   • Send Email: Choose this option to send a Rich Text email, which can include formatted content, images, and even custom jinja expressions using Dynamic Values.

     In this option, specify email addresses in a list or CSV format in the recipient fields.

     For details, see FortiSOAR SMTP Connector.

7. (Optional) Add playbook actions, such as Variables, Loops, etc., to this step by clicking Variables in the playbook step footer. For more information on playbook actions that extend playbook steps, see Playbook Steps.

8. Click Save to save the step.