Looking for a way to identify links between our parent and subplaybooks.

DHodd1 — Wed, 07 Dec 2022 19:34:06 GMT

This relates to lifecycle management and removing old unused playbooks/subplaybooks.

We can use the XSOAR Metrics widget to see when a playbook last executed, however this isn't always a good indicator as we have playbooks for rare events which have never triggered but are still required. This isn't such an issue with our parent playbooks as we know which ones are valid, however as the number of subplaybooks has increased we can't easily tell if they are being called by a parent and therefore still required.

If we can map a subplaybook back to all calling parent playbooks we can identify if it's still required.

Re: Looking for a way to identify links between our parent and subplaybooks.

jfernandes1 — Thu, 08 Dec 2022 00:44:03 GMT

Hi @DHodd1, I don't think there is an easy way to get this information. You could create an automation that checks this information for you. You can also check the contribution section, but we only show content the playbook depends on.

There is an API call to /playbook/search that returns a playbook list with every task inside.

topic Re: Looking for a way to identify links between our parent and subplaybooks. in Cortex XSOAR Discussions

Looking for a way to identify links between our parent and subplaybooks.

Re: Looking for a way to identify links between our parent and subplaybooks.