Hi!
If anyone know and can help me for my case:
a) How can I re-run a Playbook on an Alert that has already executed it previously?
b) How can I delete assigned Playbook from Alert?
c) Can I run some Playbook from another existing Playbook (Playbook in Playbook)?
a) you can run the
Re-Attach Playbook
action from the
Tools
Power Up.
b) unfortunately you cannot delete a playbook that’s already attached.
c) you cant run a playbook in a playbook, but you can make playbook blocks, which are smaller playbooks that you can build into multiple other playbooks.
I hope C wasnt too confusing there. When you go to create a new playbook, you can create a “block” instead, which then can be used in other playbooks
yes, C it's ok for me, we use blocks to aggregate some actions at this time - and I think that this is what You can try to tell me? About this function of siemplify.
View files in slack
Do we need to configure PostgreSQL Siemplify Integration too for use in this action?
it's exactly what
Integration instance name must be "Siemplify" iirc
oh yeah it looks like it does need read/write access to the siemplify DB
I personally havent used it because I dont have this DB access on my cloud instance
it uses an instance of the PostgresSQL Integration to access the siemplify DB
Ok, I try add this SQL integration for Siemplify DB and we will see
Thank guys!
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.