Skip to main content

Cyware Orchestrate

Run a Playbook Manually

You can execute a Playbook manually by clicking Run Playbook and then selecting an input option such as manual input, event, or Playbook Run Log for a Playbook execution.

To run a Playbook manually, do the following:

  1. Click Main Menu, and select Playbooks > Manage Playbooks.

  2. Select the Playbook that you need to execute and click Run Playbook.

  3. In Provide Input For Playbook Execution, choose from the following input options:

    • Run Playbook: Save changes and run the playbook immediately with an empty JSON dictionary as input.

      • Run with Input: Save the changes and run the playbook by providing input for playbook execution. This will open the Provide Input For Playbook Execution window when you can provide the following data as input for the playbook to run.

        • Manual Input: Enter JSON data for manual input. You can input data up to 4 MB. You can also import up to 64 MB of data from a JSON file.

          For example, if the data entered in manual input is { "url": "www.cyware.com" }, then you can use ${event::data::url} in the input field of a Playbook node to fetch the value of url passed at the run-time.

        • Event: Select a past event that has triggered this Playbook and reuse its event data for the Playbook execution. The preview displays event data of up to 4 MB. You can also download data between 4 MB and 64 MB size for offline analysis.

          For example, you can select a past event such as phishing, and execute a Playbook by using its event data.

        • Playbook Run Log: Select a Playbook run log from the drop-down list to reuse the manual input or event data that has executed the Playbook in the past. The preview displays run logs data of up to 4 MB. You can also download data between 4 MB and 64 MB size for offline analysis.

          For example, you can select a run log such as May 06,2022, 06:00 PM to reuse its manual input such as "a=5" to execute the Playbook.

          Note

          You can use a reused run log as input for a playbook and execute it manually. However, the run log does not include the playbook input data because the start node is not referenced. To know how to rerun playbooks from a specific node, see Rerun Playbooks from Run Logs.

      • Run with Previous Input: select this option to run the playbook with the input from the last execution. This option works regardless of the user who initiated the last run of the playbook. The last available input data of the playbook will be considered for playbook execution.

  4. Click Run Playbook.