Execution Tracking¶

You can track all the internal stages of a playbook’s execution from Execution Tracking, from activation to completion.

There are threee ways to track playbook execution:

1. Track Incidents from the SIEM: Tracks the execution of playbooks Logpoint-based incidents automatically generate. To do this, enter the incident ID and click Get Tracking Info.

   

   Track Incidents from the SIEM¶

2. Track Manual Playbook Execution: Tracks manually triggered playbooks. To do this, select a playbook from the list.

   

   Track Manual Playbook execution¶

3. Pending Playbooks: Tracks all the pending playbooks waiting for execution or for user input.

   

   Track Pending Playbooks¶

Playbooks Termination

You can terminate the pending playbook by selecting the playbook and clicking Terminate Selected Playbooks.

Terminate Pending Playbooks¶