Trigger whenever there is a URL in a ticket comment | Community
Skip to main content

Trigger whenever there is a URL in a ticket comment

  • June 20, 2023
  • 3 replies
  • 0 views

Chris76

Hi there, I am trying to understand how to trigger whenever a comment has a URL or hyperlink in a comment. 

The closest thing I can see is the "Website" > Is Present trigger, however this does not fire. I also have tried using comment text contains http:// or https://, however this does not capture hyperlinked text.

Does anyone have suggestions on how to capture this event?

3 replies

Chris76
  • Author
  • June 29, 2023

Hi @ahmed11!

I would like to trigger based on a URL in the body, as we can then post this URL to a webhook for analysis to ensure its not malicious. I know ZD has some malware detection as a built in feature, however its not sufficient for most threats you see day to day. Being able to send these URLs to our own analysis stack would be hugely beneficial.

 


Chris76
  • Author
  • September 27, 2023

Hi @ahmed11! Thank you for the reply - Only just got back to this - I've got the integration working so far as posting new comments to my webhook. How do you conditionally post to the webhook only if a URL is found? Are you happy to share?

 


Chris76
  • Author
  • September 28, 2023

Also looks like html_body can't be emitted via ZIS currently. I can only emit a plaintext body, so embedded URLs are not discoverable.