Find playbooks and subplaybooks not being used

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Find playbooks and subplaybooks not being used

L4 Transporter



Our XSOAR complexity has increased during the years, this means more playbooks and subplaybooks deployed.

However, some of them are not used anymore, many reasons about it.


How can these unnecessary playbooks and subplaybooks detected and erased?




L2 Linker



In Dashboards, there is a SOAR metrics based widget which records the number of playbook executionS, You can compare this with list of all custom playbooks you have to find out which are the playbooks not used at all and delete them.

Create a new widget and Select data source as SOAR Metrics, use this query - type:playbook and group results by Name to get the playbooks used.


Hello, thanks for the reply,

It only shows the most used playbooks when I following the steps you describe.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!