Playbook Triggers

Playbook triggers are the components that run playbooks based on the conditions defined in them. When a case is created from an incident, the system verifies a matching trigger condition. If a match is found, a trigger is started which automates the process of activating the playbook associated with it.

You can manage the triggers from the Triggers page.

Go to Navigation Bar and click Playbooks.

Click Triggers.

_images/LP_SOAR_Playbooks_Playbook.png

Playbook Page

Adding a New Trigger

You can customize a playbook trigger to automate the process of activating the playbook associated with it when the trigger condition is met by adding a new automation.

  1. Go to Playbooks >> Triggers.

  2. Click +Create Trigger.

_images/LP_SOAR_Playbooks_Triggers.png

Triggers Page

  1. In the General section,

    _images/LP_SOAR_Playbooks_Automation_Add_General.png

    Configuring General

    3.1. Enter an Automation Name, a Source, and a Case Name Template.

    3.2. Enter a Description, a Severity level, and a Unique ID for the automation.

    3.3. Click Enabled to enable the automation.

  2. In the Trigger section, enter an SQL query in Trigger. Every incident that matches the query triggers the playbooks.

    _images/LP_SOAR_Playbooks_Automation_Add_Trigger.png

    Configuring Trigger

  3. In the Automation section, select the Playbooks that must be triggered based on the trigger.

    You can also configure a new playbook by clicking Create New Playbook +.

    _images/LP_SOAR_Playbooks_Automation_Add_Automation.png

    Configuring Automation

  4. Click Save.


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support