Execute a Playbook
You can execute a Playbook manually by providing an input, event data, or using Playbook run logs.
You can schedule a Playbook to run automatically in one of the following ways:
You can view run logs to see the execution details for each node that is defined in the Playbook workflow. You can also re-run a Playbook using the Run Logs.
Security analysts can execute a Playbook to respond to security threats and vulnerabilities using automated security workflows. You can execute a Playbook after creating the Playbook workflow and configuring the Playbook nodes. You can execute a Playbook either manually or automatically.
Note
By default, the execution timeout for a playbook and a playbook node is 240 minutes. You can manually configure an execution timeout for a playbook and playbook node. For more information, see Create Playbook.
Before you Start
Ensure that you have permission to View Playbooks, Create/Update Playbooks, Approve Execution via Email, Approve Playbook Execution via Email, Run Playbooks, Approve Playbook Execution via Mobile, and Import Playbook.
For more information about the required permissions to utilize the Playbooks feature, contact your Administrator.
Best Practices
It is not recommended to edit a playbook that is in one of the following statuses to avoid any unexpected behavior:
In progress
In queue
On hold
Waiting