Runbook Node Categories

RunbookClosed An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook. nodesClosed Individual components that make up a runbook automation, each performing a specific function such as data queries, transformations, logic, integrations, or visualizations. are organized into these categories:

Trigger Entities

Start the runbook with a single triggerClosed A set of one or more indicators that have been correlated based on certain relationships, such as time, metric type, application affected, location, or network device. only.

Data Queries

Get data about the trigger and forward it to other nodes in the runbook.

Functions

Aggregate or transform data forwarded from a preceding node.

Logic

Add conditions to branch the runbook.

Impacts

Mark network resources as affected by the incidentClosed A collection of one or more related triggers. Relationships that cause triggers to be combined into incidents include application, location, operating system, or a trigger by itself..

Integrations

Work with other applicationsClosed An entity type representing software applications deployed in the customer environment that are monitored for performance and anomalies., such as HTTP.

Visualizations

Show data in a chart, graph, or note.

Variables

Define variables for manipulating data.

Miscellaneous

Annotate the runbook with comments.

Subflows

Use a subflowClosed A reusable automation chunk that performs frequently used functions, such as opening a ticket in an external system, and can be used to implement integrations with third-party systems. with an independent reusable component.

Lifecycle Triggers

Start the lifecycle runbook with a single trigger only.

Subflow Input

Start the subflow with a single input only.

Subflow Output

Terminate the subflow with a subflow outputClosed A document containing data sets generated by the execution of a runbook, including output of queries and reports from point products, as well as output of analysis or other runbook nodes..

AI

Use this node to dispatch a query to AIClosed Artificial Intelligence. Technology that applies intelligence and automation to observe environments, detect anomalous behavior, and execute automated investigations. from the runbook.