Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Capability - Determine CIs activity

The Capability - Determine CIs workflow activity determines which configuration items (CIs) to include in the workflow.

The Capability - Determine CIs activity can be used with any workflow to determine which CIs to include in the workflow.

Results

Possible results for this activity are:

ResultDescription
SuccessFound configuration items.
FailureNo CIs found. More error information is available in the activity output error.

Input variables

Input variables determine the initial behavior of the activity.

VariableDescription
task_sys_idTask identifier (maps security incident to CIs).
cis_affectedConfiguration items.

Output variables

The output variables contain data that can be used in subsequent activities.

VariableDescription
cis_affectedFiltered CIs
task_sys_idTask identifier (maps security incident to CIs).

Parent Topic:Common Security Operations integration flows and orchestration activities