12-19-2022 10:27 PM
Hi!
Is there a way to count how many times was the specific subplaybook executed across mutliple/all incidents? How to ensure the number includes loops in subplaybooks?
The reason I need this number is to better understand ROI of the platform.
Thanks
12-20-2022 03:22 AM
Hey @Antanas,
You can create a widget where the data source is "SOAR Metrics", and query on that playbook.
In the following example, I'm checking how many times were any playbooks that contain the word "Phishing" in their name were executed in the past month:
Each time a playbook loops it's considered as an execution (so looping 5 times in an incident will add 5 to the execution count).
12-20-2022 03:22 AM
Hey @Antanas,
You can create a widget where the data source is "SOAR Metrics", and query on that playbook.
In the following example, I'm checking how many times were any playbooks that contain the word "Phishing" in their name were executed in the past month:
Each time a playbook loops it's considered as an execution (so looping 5 times in an incident will add 5 to the execution count).
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
