Execution Tracking

You can track all the internal stages of a playbook’s execution from Execution Tracking, from activation to completion.

Note

Execution Tracking is disabled by default. Contact LogPoint Support to enable it.

There are two ways to track playbook execution:

  1. Track incidents from SIEM: Track the execution of playbooks LogPoint-based incidents automatically generate. To do this, enter the incident ID and click Get Tracking Info.

    ../_images/LP_SOAR_SOARSettings_ExecutionTracking_Incidents.png

    Track incidents from SIEM

  2. Track manual playbook execution: Track manually triggered playbooks. To do this, select a playbook from the list.

    ../_images/LP_SOAR_SOARSettings_ExecutionTracking_Manual.png

    Track manual playbook execution


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support