Supported in:
Google SecOps SOAR
Google Security Operations SOAR allows for a total of 10 playbooks to be attached to an alert. Only 1 playbook can be attached automatically to a single alert. However, an additional 9 playbooks can be attached manually.
Add a playbook or playbook block to an alert
- Navigate to the Cases page.
- Click the alert, within a case, that the playbook or playbook block needs to be attached to.
- In the Playbooks tab, click add Add Playbook on the right side of the screen. Choose the playbook or the playbook block to be added.
- If the selected playbook block requires input parameters, an Inputs dialog will appear. Either confirm the existing inputs or make the relevant input changes for the selected playbook block. If the playbook block does not require any input parameters, the Inputs dialog won't appear.
- The added playbook block is displayed in the Playbooks tab in the case alert.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-09-10 UTC.
[{ "type": "thumb-down", "id": "hardToUnderstand", "label":"Hard to understand" },{ "type": "thumb-down", "id": "incorrectInformationOrSampleCode", "label":"Incorrect information or sample code" },{ "type": "thumb-down", "id": "missingTheInformationSamplesINeed", "label":"Missing the information/samples I need" },{ "type": "thumb-down", "id": "otherDown", "label":"Other" }] [{ "type": "thumb-up", "id": "easyToUnderstand", "label":"Easy to understand" },{ "type": "thumb-up", "id": "solvedMyProblem", "label":"Solved my problem" },{ "type": "thumb-up", "id": "otherUp", "label":"Other" }]
