Introduction
The Workflow feature in HP Workforce Experience Platform (WXP) is a low-code workflow orchestration capability designed for large-scale IT remediation. It enables IT administrators to deploy automated workflows across thousands of endpoints using a visual, drag-and-drop interface, helping teams shift from reactive ticket handling to proactive remediation.
Dependencies and Prerequisites
Script Requirement for Branching
Scripts must be tested beforehand. Script output is used for:
Branching logic
Webhook payloads / query parameters
Webhook must be tested beforehand. Currently, we support only support JSON inputs, and plain text OR JSON outputs.
Platform and Version Requirements
Ensure the following requirements are met before creating Workflows:
Supported OS |
|---|
Windows support only for Alerts (Event trigger), Scripts, Driver Updates nodes |
Webhooks are device OS agnostic |
Groups (Schedule trigger) support Linux, mac and Windows OS |
Minimum Agent Version |
|---|
HP Insights Agent: 5.26.49 or later |
HP Insights Analytics Agent: 4.2.2584 or later |
Creating a Workflow
Step 1: Adding a Trigger
Every workflow must begin with a trigger:
Log in to WXP. The Home page is displayed.
From the left menu of WXP, click Labs. The Labs page is displayed.
On the Labs page, scroll to the Workflow section and click Try Workflow. The exiting workflow are displayed.

Click Add to create a new workflow. The Add workflow dialog box is displayed.

In the Add workflow dialog box, you can either create a new workflow from scratch or duplicate and modify an existing workflow.

When creating from scratch, trigger an event:
Event Trigger (Alert-based): The workflow is initiated when an alert occurs. The available alert options include the existing alerts that are created or provided in the platform.
Schedule Trigger: Administrators can define the date, time, and target groups for the workflow. The Group options displayed are based on the groups created in WXP platform.

Step 2: Adding Actions
After adding a trigger, you can add one or more actions to define what the workflow must do.
Script: The script options displayed are the pre-existing scripts that are either created in WXP or provided by WXP.
Webhook: Integrate with 3rd part systems, such as ServiceNow, Teams, and Slack. Configure your webhook manually or through the Swagger API endpoint URL. Testing is required before the webhook is used in a workflow.
Device action: A device action can be used to perform driver updates, such as:
Deploying all driver updates
Deploying only critical driver updates
Deploying all or critical driver updates for selected driver categories
Step 3: Adding Branching Logic
Use if/then/else conditions to create advanced logic paths. Branching can be based on the outputs from scripts, webhooks, or driver Updates.
Current Limitations
Nested branching is not supported
A branch placed before or after another branch is treated as separate—not nested
You cannot add actions after a branch
Time Zone Behavior for Schedule trigger
This behavior only applies to Schedule trigger. When creating a workflow, the scheduled time is set in your (creator’s) time zone. However, execution occurs in the local time zone of each target device. For example, If you schedule a workflow for 9:00 AM PST; the devices in EST will execute the workflow at 12:00 PM EST. This helps to ensures workflows run at the intended local time for each recipient, regardless of where they are located.
Alerts and Activity Behavior for Event trigger
Fleet vs. Device Alerts
Workflow executions triggered by alerts are reflected in the Activity tab of WXP. Activity behavior based on the type of Alert:
Fleet-level alert: Executions are shown when an alert is triggered across a fleet of devices.
Device-level alert: Executions are tracked individually for each device
Note:
If an alert is already active before publishing, those devices are included in the workflow audience.
If an alert rule changes, that is the “Trigger Conditions” section of the alert rule is updated, it can trigger new executions.
Editing the Audience
Editing is supported only for schedule-based workflows that use date-based triggers.
Editing audience is not supported for event-based workflows after they are published.
Editing Rules
The following rules apply based on the status of the workflow:
1. Workflow is Active (Recurring, Start Time Passed)
Audience: At this stage, the audience is editable.
Groups:
Adding Groups: If groups are added, they are included in Current execution (if not completed) and Future executions. This action can be viewed in the Activity tab, which shows the user who created the group and the timestamp of group creation.
Removal of Groups: If groups are removed, they are removed from the remaining devices in the Current execution and from Future executions. They are not removed from devices where execution is completed. This action is can also be viewed in the Activity tab.
2. Workflow is Active (Start Time has not Passed)
The audience can still be edited. Any changes that are made will apply to the upcoming run. All actions are logged with user details and timestamp of update.
3. Workflow is Active (One-Time, Start Time Passed)
Audience is locked and Workflow is finalized.
Viewing Workflow Statuses
You can view the status from the Workflows listing page of WXP.

The following statuses are supported.
Status | Description | Editability |
|---|---|---|
Draft | Not published | Fully editable |
Active | Published and running or scheduled | Not editable, except for audience in date-based workflows only |
Canceled | Manually stopped | Not editable |
Completed | Execution finished | Not editable |
Reviewing Workflow KPIs
After a workflow is published, you can access its KPIs by clicking the workflow name on the Workflow List page and then navigating to the Activity tab on the Workflow Details page. The KPIs are displayed under Executions tab.

Status | Schedule-based | Event-based |
|---|---|---|
In Progress | Started on at least one device and has not timed out (24-hour timeout) | The alert is still unresolved and remains active until resolution |
Completed | Finished or timed out | The alert is resolved |
Reviewing Execution Statuses
After a workflow is published, you can access execution statuses by clicking the workflow name on the Workflow list page and then navigating to the Activity tab. The executions are displayed in a table.
Execution-Level Status (Per Execution)

In Progress: Same criteria as above
Completed: Finished or resolved
Canceled: Workflow canceled before execution
Reviewing Device-Level KPIs
Device-Level Status (Within a Workflow Execution)
Device-level status indicates whether an individual device successfully completed all steps in a workflow or encountered an issue during execution. This is accessed post-publish by clicking the workflow name on Workflow list page > Activity tab > Execution (in the case of a device level alert you will devices treated as an execution).
After a workflow is published, you can access device-level status by clicking the workflow name on the Workflow list page > Activity tab, > Execution. For device-level alerts, each device is treated as a separate execution.

Note: If a device encounters a fatal error at any step, it will not proceed to subsequent steps in the workflow.
Status Types
The following statuses are supported at device level:
Status | Description |
|---|---|
Completed | The device is marked as Completed when it successfully reaches the final step of the workflow and no fatal errors occur during execution. |
Errored | The device is marked as Errored when it fails to reach the final step or when a fatal error interrupts execution. |
In Progress | The device is marked as In Progress when execution has started, the server has not yet received a response, the 24-hour execution window has not expired, and no fatal error has occurred. |
Not Processed | The device is marked as Not Processed when the device does not respond within the 24-hour timeout window or when the workflow step cannot proceed because there is no communication. For example, the device may be offline or unreachable during execution. |
Cancelled | The device is marked as Cancelled when the workflow is canceled before execution begins on that device. |
Note:
Device execution results are visible in the Activity tab.
Executions only appear when they occur
Recurring workflows will not show future executions in advance
Device-level insights help identify:
Failure points
Offline devices
Execution bottlenecks
Workflow Builder Use Cases
1. Creating a ServiceNow Ticket from an Alert
Scenario: Your organization wants to automatically create a ServiceNow (SNOW) incident when a specific alert is triggered in HP WXP.
Solution: Use an Event-based trigger (Alert) by selecting the relevant alert. For example: device health, app crash, performance issue)
Action: Add a Webhook action and configure the webhook to integrate with your ServiceNow endpoint. Ensure the webhook payload includes key device details (such as the device serial number) to support accurate ticket creation and tracking. You can dynamically populate these fields using our Variable list which provides access to:
Global variables, such as device-level attributes.
Step outputs, such as script results or previous action outputs
Using these variables ensures consistent formatting and enables richer, context-aware integrations (such as ServiceNow tickets).
Outcome:
When the alert is triggered, a ServiceNow ticket is automatically created per device.
Faster incident response without manual intervention
Note: Ensure webhook payloads are tested in advance to validate field mappings and ticket creation in ServiceNow.
2. Automated Remediation + Ticketing for PowerPoint Crashes
Scenario: An alert indicates that PowerPoint crashes are impacting a percentage of your fleet. Your organization wants to automatically remediate affected devices and create tickets only for failures.
Solution: Use an Event-based trigger (Alert). For example, PowerPoint crashes affecting X% of devices.
Action 1: Run a script action to update affected devices to the latest version of Microsoft Office.
Branching Logic (If/Then):
Evaluate the script result:
If Exit Code = 0 (Script Success):
End workflow (issue resolved)
Else (Failed):
Proceed to next step
Action 2 – Webhook (ServiceNow Ticket):
Trigger a webhook to create a ServiceNow ticket, if devices fall under the Else (aka failed condition)
Include:
Device details
Script output (for troubleshooting)
Outcome:
Devices are automatically remediated at scale
Only failed devices generate tickets, reducing noise
IT teams focus on exceptions rather than the entire fleet
Key Benefits Across Use Cases
Reduces manual ticket creation
Automates remediation before escalation
Minimizes ticket volume in ServiceNow
Improves response time and end-user experience
Related Resources
For additional information, refer to the Overview of Workflow article.
Contact Us
For any assistance, create a support case or email support@wxp.hp.com.