--- title: "Adding an Operator Knowledge Base Article | ThreatConnect" slug: "adding-an-operator" description: "This article describes how to add Operators in the Playbook Designer." tags: ["Orchestration and Automation"] updated: 2023-05-12T20:56:05Z published: 2023-05-12T20:56:05Z --- > ## Documentation Index > Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt > Use this file to discover all available pages before exploring further. # Adding an Operator 1. To add an Operator to a Playbook, click the![Playbook Designer Operators icon](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Playbook%20Designer%20Operators%20icon.png)**Operators**button on the side navigation bar of the **Playbook Designer**. All available Operators will be displayed to the left of the design pane (Figure 1). ![Figure 1_Adding an Operator_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Adding%20an%20Operator_7.1.0.png) 2. Select an Operator to add to the design pane (Figure 2). See the [“Operators” section of *Parts of a Playbook*](https://knowledge.threatconnect.com/docs/parts-of-a-playbook#operators) for a definition of each Operator. This example, which builds from the example in *[Adding an App](https://knowledge.threatconnect.com/docs/adding-an-app)*, uses the If / Else Operator. ![Figure 2_Adding an Operator_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%202_Adding%20an%20Operator_7.1.0.png) NoteThe red exclamation point icon at the lower-left corner of the Operator****indicates that required information is missing, creating a validation error. Hover the cursor over the icon on the Operator to view details on the missing information. Details on validation errors can also be found in the![Validations icon_No Errors](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Validations%20icon_No%20Errors.png)[**Validations**](https://knowledge.threatconnect.com/docs/validations) pane of the side navigation bar, where the icon displayed on the sidebar shows the current number of validation errors in the Playbook (e.g.,![Validations icon_3 Errors](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Validations%20icon_3%20Errors.png)). 3. If desired, move the Operator in the design pane, and then double-click inside the Operator to open the **Edit App**configuration pane on the left side of the screen (Figure 3).ImportantThe contents of the **Edit App** configuration pane differ for each Operator type. Click **Display Documentation![Playbooks_Display Documentation icon](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Playbooks_Display%20Documentation%20icon.png)**at the upper right of the **Edit App** pane to view information about the Operator, including a description, input parameters, and output variables. Refer to this information when configuring the options in the **Edit App** pane.![Figure 3_Adding an Operator_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%203_Adding%20an%20Operator_7.1.0.png) 4. Fill in the configuration parameters for the Operator, and then click the **SAVE**button.ImportantWhen filling in parameter fields, enter a hashtag (**#**) character to view and select from a list of available global variables and output variables from upstream Playbook elements. These output variables will be displayed in the list only if the Operator has been connected to a Playbook element in the upstream logic (that is, to a Playbook element that comes before it in the Playbook’s logical flow). As such, it is recommended that you connect Operators to upstream elements prior to their configuration. See *[Connecting Playbook Elements](https://knowledge.threatconnect.com/docs/connecting-playbook-elements)* for more information. The Merge and Iterator Operators are the only Operators that have output variables, which are values that a Trigger, App, or Operator can send to other Apps, and Operators. For these Operators, these variables do not automatically exist, but must be configured by the user. - **Iterator Operator**: See [*Playbooks Iterator Operator*](https://knowledge.threatconnect.com/docs/playbooks-iterator-operator) for more information. - **Merge Operator**: Once you connect the Merge Operator to a calling App (i.e., an App directly upstream), output variables from that App become available to the Merge Operator. In the **Output Variables**section of the **Edit App**pane for the Merge Operator, create output variables for the Merge Operator by entering key/value pairs. In the **Key**field, enter a name for the output variable. In the **Value**field, enter a hashtag (**#**) to display a list of variables available from the upstream App, and then select a value from the list. Click **Plus![Plus icon_Adding an Operator_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Plus%20icon_Adding%20an%20Operator_7.1.0.png)**to accept them into the **Output Variables**table. Then click the **SAVE** button. If desired, hover the cursor over the hashtag at the upper-left corner of the Iterator or Merge Operator box in the design pane to view a scrollable list of available output variables (Figure 4). ![Figure 4_Adding an Operator_7.1.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%204_Adding%20an%20Operator_7.1.0.png) Click the **Menu![Playbook Merge Operator Menu icon](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Playbook%20Merge%20Operator%20Menu%20icon.png)**icon at the upper-right corner of the Operator box to view a dropdown with some or all of the following options: - **Edit**: Select this option to edit the Operator. - **Log**: Select this option to set or change the log level for the Operator. This option is not available for the Break Iterator Operator. NoteWhen setting or changing the log level, if you choose a level other than **Playbook Default** and select the **Apply to all ‘downstream’ apps** checkbox, then a **Log Level![Log Level icon](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Log%20Level%20icon.png)**icon will be displayed on the boxes for the Operator and all its downstream Apps and Operators, indicating that the log level is the same for all Playbook elements with the icon. Hover over the icon to view the log level. - **Disable**: Select this option to disable the Operator. When an Operator is disabled, it will be grayed out, and the **Disable** option will be replaced by an **Enable** option. - **Clone**: Select this option to clone the Operator. - **Delete**: Select this option to delete the Operator. --- *ThreatConnect® is a registered trademark of ThreatConnect, Inc.* 20110-24 v.03.A