Hi!
If anyone know and can help me for my case:
a) How can I re-run a Playbook on an Alert that has already executed it previously?
b) How can I delete assigned Playbook from Alert?
c) Can I run some Playbook from another existing Playbook (Playbook in Playbook)?
a) you can run the
Re-Attach Playbook
action from the
Tools
Power Up.
b) unfortunately you cannot delete a playbook that’s already attached.
c) you cant run a playbook in a playbook, but you can make playbook blocks, which are smaller playbooks that you can build into multiple other playbooks.
I hope C wasnt too confusing there. When you go to create a new playbook, you can create a “block” instead, which then can be used in other playbooks
yes, C it's ok for me, we use blocks to aggregate some actions at this time - and I think that this is what You can try to tell me?
About this function of siemplify.
Do You know what's mean this message after we use Re-Attach Playbook?
View files in slack
Do we need to configure PostgreSQL Siemplify Integration too for use in this action?
it's exactly what
guessed, because of the reason in
s comment
Integration instance name must be "Siemplify" iirc
oh yeah it looks like it does need read/write access to the siemplify DB
I personally havent used it because I dont have this DB access on my cloud instance
it uses an instance of the PostgresSQL Integration to access the siemplify DB
Ok, I try add this SQL integration for Siemplify DB and we will see
Thank guys!
Reply
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.