11-13-2022 01:41 PM
Hello,
Our XSOAR complexity has increased during the years, this means more playbooks and subplaybooks deployed.
However, some of them are not used anymore, many reasons about it.
How can these unnecessary playbooks and subplaybooks detected and erased?
Thanks
11-14-2022 08:42 AM
Hi,
In Dashboards, there is a SOAR metrics based widget which records the number of playbook executionS, You can compare this with list of all custom playbooks you have to find out which are the playbooks not used at all and delete them.
Create a new widget and Select data source as SOAR Metrics, use this query - type:playbook and group results by Name to get the playbooks used.
11-15-2022 11:30 PM
Hello, thanks for the reply,
It only shows the most used playbooks when I following the steps you describe.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
