Execution Tracking

You can track all the internal stages of a playbook’s execution from Execution Tracking, from activation to completion.

Note

Execution Tracking is disabled by default. Contact Logpoint Support to enable it.

There are two ways to track playbook execution:

  1. Track Incidents from the SIEM: Track the execution of playbooks Logpoint-based incidents automatically generate. To do this, enter the incident ID and click Get Tracking Info.

    ../_images/LP_SOAR_SOARSettings_ExecutionTracking_Incidents.png

    Track Incidents from the SIEM

  2. Track Manual Playbook Execution: Track manually triggered playbooks. To do this, select a playbook from the list.

    ../_images/LP_SOAR_SOARSettings_ExecutionTracking_Manual.png

    Track Manual Playbook execution


Helpful?

We are glad this guide helped.


Please don't include any personal information in your comment

Contact Support