How could TheHive alert get Observables without case ID? the flow doesnt work at all, it is because of Observables requires case ID instead of alert ID, the flow is definitely wrong. without case promoted by alert, it is not able to retrieve the Observables, and then it is not able to get to run the executer, then you wont get the alert is true or false…
Hey @N8Wolf, welcome to the community!
It looks like you shared a picture of your workflow rather than the workflow itself, so I am not entirely sure what your question is about. Did you build the workflow yourself or got it from a friend or colleague?
this can be closed as I think I was wrong