Runbook Analyses Page

The Runbook Analyses page lists the outputsClosed A document containing data sets generated by the execution of a runbook, including output of queries and reports from point products, as well as output of analysis or other runbook nodes. of on-demand and webhook runbooksClosed An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. that have executed in the last 30 days.

  1. Navigate to the Runbook Analyses page:

    1. Click Automation in the left menu.

    2. Click Runbook Analyses.

  2. Click the link in the runbook output's Runbook Analyses field to view the details on the runbook details page

The Runbook Analyses page shows these properties for each runbook output that it lists:

  • Runbook Analysis: The description of the output from an on-demand or webhook runbook execution. This defaults to the name of the runbook itself. Click on the description to view the output.

  • Runbook: The name of the on-demand or webhook runbook that executed to generate this output.

  • Entityt Type: The category of entityClosed Things deployed in the customer environment that are needed to run the business, such as applications, devices, interfaces, and locations. that the runbook was executed for.

  • Execution Method: For on-demand runbooks, this is Manual. (Other values can be Webhook and Scheduled.)

  • Time: The date and time the runbook output was generated.

  • Executed By: The user account that executed the runbook to generate the output.

  • Status: This will be InProgress, Completed, CompletedWithErrors, or Failed.

The Runbook Analyses page also provides these controls for modifying the set of runbook outputs that are shown on the page:

  • Filters: Use faceted search to refine the runbook outputs. You can filter by Output Name, Status, Entity Type, Execution Method, and Executed By.

  • Search panel: Type a string to find matching instances in the list of runbook outputs. The search string must begin with text and does not support the use of "*".

  • Run Runbook: Open the Run Runbook dialog to specify a runbook to execute now. The runbook's output will be listed here on the Runbook Analyses page.

  • Time Period: Specify the window of time for which to show runbook outputs. The page lists outputs for the last 30 days by default.

  • Column Chooser: Click this to change the set of properties shown for the runbook outputs.