Help with setting up a Business Rule

[Feasood]

We have an API that logs Incident tickets when certain threat emails are detected and I need help to setup a Business Rule to be able to differentiate between the two types and then assign the ticket to a Service Offering.

There are two Service Offerings called 'Malware' and Phishing and Spam'.

I have a list of the names of the types of Phishing emails and thought to setup a Business Rules that checks if the name contains any of the names, then the action would be to set the Service Offering to 'Phishing and Spam'.  The issue I am facing is how to then say if the name doesn't contain any of the names, to set the Service Offering to 'Malware'.

I would assume you could use a script but as I am new to scripting, I'm not 100% sure on how to do this.

Is someone able to advise me on how I can go about doing this please.

I have attached a copy of the 'When to run' part of my BR.

Many Thanks

Mike

[SanjivMeher]

Can you post the screenshot of the script? 

I think you need to add the logic/condition there with if/else condition or create another BR where you write condition doesnt contain and set to Malware

[Feasood]

Hi Sanjiv,

I don't currently have a script as I'm not sure how to start to make one.

I am currently using the Actions tab and have set the fields that way for Phishing but can't then set the opposite for Malware.

[SanjivMeher]

In that case, I would suggest creating two BR. One for 'Malware' and one for 'Phishing and Spam'

[Brad Bowman]

Is Workbench name a custom field on your incident table, or was this added through a plugin?  The selection box looks like you can select more than one value - is there a choice instead of 'contains' for 'is one of'?