Is there a way to launch a playbook from a button in an incident

[RonShuck22]

I have a couple different use cases where I have several steps in a playbook that I would like to complete again after the playbook is complete. I basically have several steps in a playbook that I would like to have launched by a button. I am trying to avoid the lengthy process of converting the steps to a standalone script. Plus, it is much easier to test aspects of a playbook as opposed to script code.

In one of the use cases, I need user input so not sure if this is even possible in a script.

Use Case 1: I have steps in the playbook that run a query from our siem for activity for a suspect source IP. I would like to be able to run these steps again later to see if the amount of activity has changes since the incident was created.

[jfernandes1 · Accepted solution]

Hi @RonShuck22, you can have a button that calls the "setPlaybook" command. You only need to pass the playbook name. This will switch the playbook in the workplan. I would also suggest using a display trigger to ensure that the current playbook is not running. 

Example below.

Control button display, but hovering over the button and then selecting the "eye" icon.

[RonShuck22]

That worked. Thanks.