Runbook
A runbook
An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. is an automated workflow that executes a series of steps or tasks in response to a triggered A set of one or more indicators that have been correlated based on certain relationships, such as time, metric type, application affected, location, or network device. event. Such events can be the detection One or more indicators that are correlated and may act as a trigger for incident creation or runbook execution. of anomalous An unexpected event or measurement that does not match the expected model. behavior generating an incident A collection of one or more related triggers. Relationships that cause triggers to be combined into incidents include application, location, operating system, or a trigger by itself., a lifecycle event in response to state changes within an incident, or manually executed runbooks that collect critical data to assist users.
A runbook comprises a set of automated procedures, represented by runbook nodes Individual components that make up a runbook automation, each performing a specific function such as data queries, transformations, logic, integrations, or visualizations., which are assembled in sequence to define the automated investigation. See the Runbook page description and the Incident page description for learn how runbooks are used to investigate incidents.
Some runbooks are built in to Riverbed IQ Ops, and it is possible to define your own custom runbooks or import them from a file.