Skip to main content
Solved

Playbook Widget Behavior in Alert Overview

  • March 26, 2025
  • 1 reply
  • 26 views

jaymin
Forum|alt.badge.img+6

Hi everyone,

I have created a playbook with multiple widgets. When no playbook is attached to a case, and I manually attach a playbook with widgets, the widgets are successfully created on the Alert Overview page (Scenario #1).

However, if a playbook with widgets is already attached, and I manually attach my playbook with widgets, no new widgets are created on the Alert Overview page (Scenario #2).

What should be the expected behavior in this scenario? I believe that when a playbook with widgets runs, it should override the Alert Overview and display the new widgets. Also the playbook widget has all the roles selected so any role can view the widgets.

I have attached few screenshot for your reference.
Looking forward to your insights!

Scenario #1

Scenario #2

 




Best answer by ylandovskyy

Hey @jaymin ,

Please refer to the comment added to this post: https://www.googlecloudcommunity.com/gc/SecOps-SOAR/Playbook-Widget-Behavior-in-Alert-Overview/td-p/888644/jump-to/first-unread-message

1 reply

ylandovskyy
Staff
Forum|alt.badge.img+16
  • Staff
  • Answer
  • March 26, 2025