Skip to main content

Orchestrate Next Gen

Terminate Playbook Runs

You can terminate playbook runs to free up resources and avoid unintended effects during execution. You can terminate individual runs or multiple at once. Playbook run logs are grouped into the following two categories depending on whether they can be terminated:

  • Terminable: You can only terminate run logs with status In Progress, In Queue, Waiting, or On Hold.

  • Non-Terminable: You cannot terminate run logs with the status Error, Success, Partial Success, System Error, or Terminated

    Sub-playbook runs triggered by other playbooks cannot be terminated.

Terminate a Playbook Run

You can terminate a playbook from the run logs listing page or a specific run log.

Steps 

To terminate a playbook from the run logs listing page, follow these steps:

  1. Go to Main Menu > Run Logs.

  2. Select the checkbox corresponding to the playbook run log. You can search for a playbook by its name or ID.

  3. Click Terminate, and in the confirmation pop-up, click Terminate.

To terminate a run log from the run log detailed page, you should open a run log, click Terminate, and in the confirmation pop-up, click Terminate.

Note

If you terminate a playbook run, all associated Cyware Agent tasks are also terminated, including tasks from sub-playbooks. To view terminated Cyware Agent tasks, go to Main Menu > Cyware Agent Tasks.

Bulk Terminate Playbook Runs

Analysts can terminate multiple playbook runs at a time, eliminating the need to terminate every playbook run individually, thereby saving time and effort. Terminating a playbook run also terminates the associated sub-playbooks.

Note

You can terminate a maximum of 100 playbook runs at a time with the run log status In Progress, In Queue, Waiting, or On Hold.

Steps 

To bulk terminate playbook runs, follow these steps:

  1. Go to Main Menu > Run Logs.

  2. Select the playbook run logs that you need to terminate in one of the following ways: 

    • Select the checkboxes corresponding to the playbook runs you want to terminate.

    • Select Filter and choose the status to terminate the playbook run by their status.

  3. Click Terminate, and in the confirmation pop-up, click Terminate.

    Note

    If you bulk terminate playbook runs, all associated Cyware Agent tasks are also terminated, including tasks from sub-playbooks. To view terminated Cyware Agent tasks, go to Main Menu > Cyware Agent Tasks.