Export Run Logs Metadata
Export run logs metadata from the run logs listing page to audit and analyze playbook executions offline. You can select a date range to export all playbooks executed within that period. To export logs based on specific parameters, such as playbook run status, playbook type, and more, select the Filters on the Run Logs listing page. After applying the filters, select the date range and export the run logs in CSV or XLSX format.
Note
This feature is available in Orchestrate Next Gen v3.12.8 onwards.
The exported run logs file will consist of the following details:
Playbook ID: View the unique ID of a playbook. For example, PL435675
Playbook name: View the name of a playbook. For example, Threat Hunting
Run Log ID: View the unique ID associated with each run of a playbook.
Last Run in: View the time and the timezone of the playbook’s most recent execution.
Run Duration: View the duration of the playbook execution.
Run by User: View the user who has run the playbook.
Playbook Status: View the run status of a playbook. For example, success.
Triggered by: View the execution method of the playbook. For example, manual or automated.
Sub-Playbooks: View the count of the sub-playbooks associated with the playbook.
Before you Start
Ensure you have the View Run Logs permission to view and export run logs. For more information, see User Groups Permission Set.
Steps
To export run logs, follow these steps:
Go to Main Menu > Run Logs.
Click Export in the top-right corner.
Select the export format. The supported file formats are CSV and XLSX.
Select a date range from the date picker.
Note
You can export up to 50,000 run logs or run logs from a period of up to 31 days. By default, the export is set to the current day.
Click Export.
The run logs for the specified date range are exported. You will receive an email with the download link when the export is ready.